US hardcore not interested in the Net

Found on The Register on Monday, 21 June 2004
Browse Internet

The US has a hardcore group of people who simply aren't interested in using the Internet. Around a third of US adults have rejected the Net, causing researchers to split them into two distinct groups.

"Resistors" - which make up 16 per cent of this hardcore group - have access to the Net either at home or work but chose not to use it. The second group - which makes up around 20 per cent of the US population - is described as "Unconnected," and doesn't have access to hand anywhere.

While I couldn't be without Internet access, I can understand their point. After all, I belong to the minority who does not want a cell phone.

Hotmail Blocks Gmail Emails (and Invites)

Found on Slashdot on Sunday, 20 June 2004
Browse Internet

Emails and invitations sent to Hotmail from Gmail accounts do not bounce, but nor do they arrive in the recipient's Inbox - they vanish mysteriously into the aether. Joel Johnson writes in his Gizmodo weblog that invitations he sent to a Hotmail address bounced (this even received coverage from ZDNet). Search Engine Roundtable writes that several ISPs are blocking Gmail. It's already well-documented that Yahoo moves Gmail invites into the Bulk Mail folder. I've personally confirmed the Hotmail and Yahoo blocking.

Great... are we reaching a point now where email providers try to fight against competitors by blocking them? Email is supposed to be delivered to every account; the last thing I want to see is that Yahoo can only send to Yahoo, and Hotmail only to Hotmail. This will end up with non-compatible systems like in the IM sector.

Spam illustrates problems of spam

Found on The Inquirer on Saturday, 19 June 2004
Browse Internet

An unwanted email received yesterday illustrated some of the basic problems with an opt-in legislation in one country and an opt-out legislation in another.

"If there is a valid email address out there then this is legal for Quest Systems to send email to this until this specific email address does opt-out from getting future newsletters from Quest Systems."

"For any that get hostile towards or flame or send any shape or form of a threat to Quest Systems it will be that these will be proactively reported to the FBI." [He must be clairvoyant if he reports proactively.]

And therein lies the rub. When one country adopts one type of legislation but others another, and when folk like Mr Kurtz assume that because we have no country identifier in our email address we must be based in the USA, the fundamental problem of conflicting anti-spam legislation becomes very obvious.

Spammers aren't that bright. Obviously, the Internet is a US thing only, covered entirely by US laws. I don't know how I missed that. Hopefully some of the recipients decide to send a complain to their ISP and website provider (or at least blacklist the mailserver).

Comcast Gets Tough on Spam

Found on Slashdot on Saturday, 12 June 2004
Browse Internet

The Washington Post is reporting that Comcast, the nation's largest broadband ISP, has started blocking port 25 to reduce Spam. Jeanne Russo said Comcast is not blocking port 25 for all its users because it does not want to remove the option for legitimate customers who process their own e-mail. So the company is monitoring traffic and picking out machines that look suspicious. By blocking port 25, they say they cut Spam by 20% last week." ZDnet has another article, with a nice statistic: Comcast generates 800 million email messages/day, but only about 100 million of those are sent through Comcast's SMTP servers.

Instead of blocking port 25 by default, as many demand, ISPs should monitor connections to SMTP servers and close the port if too many messages are sent in a short time. I don't like the idea of having my access limited because of some spammers. Sometimes it is important to be able to connect to port 25, for example if I have to check if the mailserver still works fine. Administrators could also block all Comcast nets and only allow IPs of their mailservers. Not that hard with Sendmail.

IE flaws used to spread pop-up toolbar

Found on ZD Net on Wednesday, 09 June 2004
Browse Internet

An adware purveyor has apparently used two previously unknown security flaws in Microsoft's Internet Explorer browser to install a toolbar on victims' computers that triggers pop-up ads, researchers said this week.

Microsoft learned of the issue when a security researcher posted an analysis of the problem to the Full Disclosure security mailing list Monday. The software giant has already contacted the FBI and is in the "early stages" of building the case, Toulouse said. The company is considering creating a patch quickly and releasing it as soon as possible, rather than waiting for its usual monthly update.

The flaws are apparently being used to install the I-Lookup search bar, an adware toolbar that is added to IE's other toolbars. The adware changes the Internet Explorer home page, connects to one of six advertising sites and frequently displays pop-ups--mainly pornographic ads, according to an adware advisory on antivirus company Symantec's Web site.

Ok, I can see a point when computers are hijacked for illegal activities; but usíng an exploit for mareketing? I-Lookup must be aware of the fact that this will get them in troubles quickly.

Pop-up technology improves

Found on The Inquirer on Sunday, 06 June 2004
Browse Internet

According to news.com, Google's tool bar, which was confidently touted as a firewall against pop-ups has been tunnelled under by the ad companies.

Blocking software usually detects an HTML command known as "openwin" for opening a new window. However, a new breed of pop-ups avoid that command. Some advertisers are sending pop-ups through a "user initiated command" triggered when people "mouse over" an object on the page.

Another technique uses JavaScript commands, and gets around pop-up blockers that don't block user initiated commands like Google and Yahoo.

According to researcher Nielsen NetRatings, pop-ups have only become more prevalent after software appeared to kill them. Their number has increased nearly six times since 2002. A number of big publishers use pop up ads.

Don't the marketing guys understand anything? If people block pop-ups, that doesn't mean they want more of them. What is really helpful here are local proxies with editable rulesets to quickly adapt to the new tricks.

Can-Spam Act Leads To More Spam

Found on Techdirt on Thursday, 03 June 2004
Browse Internet

Back when President Bush made spam legal, we predicted the floodgates would open and actually increase spam. Now we've got some numbers to back up that prediction. According to anti-spam vendors, spam is on the rise and increasingly complies with the Can-Spam Act now; almost 10% of spam is legal up from 1% in January. And given that 7% of email users actually buy products from unsolicited email (ugh!), spam doesn't seem to be decreasing at all. So there don't appear to be any easy solutions to the spam problem, but if we're going to pass silly laws, maybe we need to pass a law against buying products promoted by spam.

Seven percent!? I can't believe there are so many stupid people out there! No wonder we're getting flooded with that crap more and more. Someone should start beating them with heavy blunt objects.

Online dating firm patents cupid's arrow

Found on The Register on Saturday, 29 May 2004
Browse Internet

The US patent office has outdone itself this week, awarding dating company eHarmony a patent covering online matchmaking.

In patentese, US patent no. 6,735,568 describes a computer implemented method for "identifying people who are likely to have a successful relationship".

Critics complain that reducing all of human relationships to an empirical test takes away the mystery. However, researchers at eHarmony maintain that a psychological profile is a good predictor of marital success. "Opposites might attract, but in our research they don't stay together," said Dr. Galen Buckwalter, vice president of research at eHarmony.

I wonder if the guys at the patent office read the requests or if they just write "approved" on them. It might be better not to make cynical jokes and suggestions about possible future patents, since they might become true.

Spam fighters infiltrate spam clubs

Found on The Register on Friday, 14 May 2004
Browse Internet

Online spammer forums like the Pro Bulk Club the Bulk Club and bulkmails.org have been gatecrashed by activists from organisations like Spamhaus. Steve Linford of Spamhaus said spammers know this already but they don't know who amongst their number is working for the other side.

Instead of using open mail relays or unscrupulous hosts (so-called 'bullet-proof' hosting - in reality ISPs in the third world who pull the plug on spammers when enough complaints are received by their upstream provider), spammers are using compromised machines to get their junk mail out. Viruses such as My-Doom and Bagle surrender the control of infected machines to hackers. This expanding network of infected, zombie machines can be used either for spam distribution or as platforms for DDoS attacks, such as those that many online bookies have suffered in recent months.

No doubt that spamming is a profitable business; and it will be as long as there are enough idiots who fall for the spam and lots of uneducated people who have no idea how to secure their machines. If users complain about worms which keep on shutting down their computers, they should remember that the main reason for getting infected is their insecurity. Besides, better a crashed XP than another spamhost.

New version of Sasser

Found on The Register on Sunday, 09 May 2004
Browse Internet

The appearance of a new version of the infamous Sasser worm shortly after the arrest of its admitted author has fuelled speculation that its creator worked with other virus writers.

Sasser-E was first spotted three hours and 45 minutes after the arrest of Sven Jaschan, 18, from Rotenburg in northern Germany at 2pm on Friday afternoon (local time). Either earlier sightings of the fast-spreading worm were missed or Sasser-E was released by someone other than Jaschan, who was released from police custody after the new version of the worm arrived onto the scene.

Sasser-E uses the same Windows vulnerability as previous versions to spread across vulnerable Windows 2000 and XP machines, causing them to become unstable and shutdown. Unlike previous version, Sasser-E gives a warning from the "SkyNet Team" about the vulnerability it exploits. Unlike the first four Sassers but like many NetSky variants, Sasser-E tries to remove the Bagle worm.

Why does everybody blame one single guy? Or the scene in general? The media makes it look like it's only their fault. If you take a look at real-life, you will notice that eg. insurances won't pay if you left your car or house open. They all try to find a way to blame you for inviting the thief. But many home-users (and even companies) still don't pay much attention to security.