Who should govern the Net?

Found on CNet News on Wednesday, 17 March 2004
Browse Internet

It's no longer merely an academic question. Since 1998, responsibility for overseeing domain names and addresses has rested with the Internet Corporation for Assigned Names and Numbers (ICANN), a nonprofit group based in Marina Del Ray, Calif.

ICANN has enjoyed notable successes in the last six years. It has created a way to resolve domain name disputes, formalized some ad hoc arrangements the U.S. government created and approved a handful of top-level domains like .aero and .museum. In between, ICANN has weathered outbreaks of congressional enmity and, occasionally, outright hostility from foreign governments.

But now, the governance structure of the Internet may have reached an inflection point. ICANN is being assailed domestically by VeriSign, which filed a federal lawsuit last month, complaining that it has been repeatedly thwarted in trying to make money off its government-granted right to run the master .com and .net database. Internationally, ICANN is fending off a power grab from the United Nations, which has wanted more involvement with the Internet, ever since one of its agencies in 1999 proposed a tax of 1 cent per every 100 e-mail messages.

ICANN should stay on top. One of the reasons is the fact that it is a nonprofit group. Give the control to some corporations, and they turn it into InterAd. Let governments do the job, and you end up with InterTax (besides, the Internet is a worldwide net).

Comcast cutting off spam 'zombies'

Found on Info World on Tuesday, 09 March 2004
Browse Internet

Internet service provider Comcast Corp. is cutting off Internet service for some customers whose computers are being used to relay spam messages, according to a company spokeswoman.

"Comcast is one of the favored networks of spammers, because Comcast customers have a lot of bandwidth and are usually not secured against common (software) vulnerabilities," Ullrich said.

At the same time, Senderbase records show what appear to be the Internet Protocol addresses of more than 40 Comcast customers who have sent out more than 100,000 e-mail messages a day, with many sending close to 1 million daily e-mail messages. ( http://www.senderbase.org/?searchString=comcast.net&searchBy=domain.)

Ullrich said the Internet Storm Center tells Comcast when it finds infected hosts by sending a message to a Comcast e-mail address set up to receive complaints about abuse. Typically the company does not respond directly to such reports, but it has moved to shut down infected hosts after receiving complaints, he said.

If users don't care about the security of their systems, then ISP's will. Perhaps cutting users off completely is too drastic, since it also makes it impossible to download the latest virus patterns, malware scanners and updates. Block outgoing connections to all ports, except 80/http and 110/pop3 so they can email users to update their machine.

Gates: Buy stamps to send e-mail

Found on CNN on Friday, 05 March 2004
Browse Internet

NEW YORK (AP) -- If the U.S. Postal Service delivered mail for free, our mailboxes would surely runneth over with more credit-card offers, sweepstakes entries, and supermarket fliers. That's why we get so much junk e-mail: It's essentially free to send. So Microsoft Corp. chairman Bill Gates, among others, is now suggesting that we start buying "stamps" for e-mail.

Many Internet analysts worry, though, that turning e-mail into an economic commodity would undermine its value in democratizing communication. But let's start with the math: At perhaps a penny or less per item, e-mail postage wouldn't significantly dent the pocketbooks of people who send only a few messages a day. Not so for spammers who mail millions at a time.

Goodmail chief executive Richard Gingras said individuals might get to send a limited number for free, while mailing lists and nonprofit organizations might get price breaks.

Ok, something should be done against spam. Paying for emails might stop spam, but also a lot of usefull emails. Who would run a mailinglist with a few thousand recipients? Does the listadmin or the sender pay? Just take a look at all the lists for open-source projects. I hate spam, but I do not want a solution like that.

UK police chief: Shut down 'abhorrent' Web sites

Found on ZD News on Tuesday, 24 February 2004
Browse Internet

The most senior officer from the UK's Hi-Tech Crime Unit has called for Web sites devoted to subjects such as cannibalism and necrophilia to be closed down, claiming they contribute to Internet criminality.

Detective chief superintendent Len Hynds, who is the head of Britain's National Hi-Tech Crime Unit (NHTCU), said on Tuesday that the most vulnerable people in society need to be protected from corrupting influences.

According to Hynds, Web sites devoted to such extreme material are the online equivalent of graffiti and litter. He believes that taking a zero tolerance on this kind of content could make the Internet a more law-abiding place.

I'm sure Bin Laden, Saddam Hussein, some governments and most other criminals are surfing the whole day, looking for new ideas. But yes, we need protection: the Internet needs to be protected from corrupting influences like Len Hynds. His stupid ideas remind me too much of Fahrenheit 451.

ZoneAlarm firewall has massive gaping hole

Found on Security News Portal on Wednesday, 18 February 2004
Browse Internet

The extremely popular firewall, ZoneAlarm, has been dealt a nasty blow with a "highly critical" security hole that allows system access to remote users - i.e. the worst possible situation. The hole affects the most recent version of ZoneAlarm - version 4 - and users with the software's update facility turned on were this morning warned to upgrade and asked to download a run a 4.8MB patching file. The vulnerability itself is an unchecked buffer in the fundamental e-mail protocol SMTP. ZoneAlarm's creators Zone Labs warned that sufficiently exploited, "a skilled attacker could cause the firewall to stop processing traffic, execute arbitrary code, or elevate malicious code’s privileges".

Unfortunately ZoneLabs is taking this 'golden opportunity' to extort subscription fees out of the end users. Yes... you need to have a "current annual update and support subscription" when you visit ZoneAlarm's download page for this updated version.

Wait... you have to pay to get a bug fixed? That's quite a new approach. Somehow I doubt this will be the perfect solution to get new customers. Luckily, I use another firewall.

Microsoft.com down, up, struggling

Found on The Inquirer on Sunday, 08 February 2004
Browse Internet

Microsoft's Web site disappeared from our Internet radar this morning. The site may have been struck down by attacks by virus writers who threatened to target Microsoft in the way SCO was targeted last week.

According to Netcraft here, Microsoft.com went down at midnight London time. Microsofties are currently beaving away to repair the damage, we understand, though no statement is yet forthcoming from the Vole concerning what the reasons for the outage are.

Finally, a hit! It was about time, after several worms failed to take MS down.

Moving Net Control From ICANN?

Found on Slashdot on Saturday, 07 February 2004
Browse Internet

The BBC has a piece by Bill Thompson suggesting that "control" of the internet should move away from corporate groups(ICANN and the Web Consortium) and to governments. We previously had an article on ICANN and the UN World Summit on the Information Society. One quote: "We allow images of consensual sex in our cinemas, but not images of bestiality or child abuse. Why should the net be any different?" My personal answer: because the internet should not be another TV or cinema, it should be a free, user-as-peer and user-controllable media; a "reversible" media, as Baudrillard would put it; not user-as-consumer.

Governments would add censorship, because they fear uncontrollable mediums First, it's "against spam only"; then "against porn"; then "for your savety". Until it's too late. If the price for being uncontrolled are popups, spam, scams, virii and worms, then I will pay with a smile on my face instead of turning my freedom to some uncontrollable government agencies.

Mydoom virus starts to fizzle out

Found on BBC on Friday, 06 February 2004
Browse Internet

Figures from mail filtering firm MessageLabs show that the number of copies of the virus being caught everyday are swiftly diminishing.

Despite the slowdown Mydoom has already become the fastest spreading virus ever and looks set to challenge the Sobig.F program for the most active virus of all time.

The virus did not rely on technical tricks to spread so far and wide, instead it played on the gullibility of users to open the e-mail message bearing it and click on the infected attachment.

A perfect proof of concept: users still haven't learned. They still open any attachment they receive, without thinking first and afterwards damn the virus writer. But then, people also trust spam and 419er scams. Of course, someone you never met before needs you to get millions of dollars out of Nigeria. And of course, you'll be rewarded. Human stupidity...

MyDoom Net Worm Scores Hit

Found on Reuters on Saturday, 31 January 2004
Browse Internet

The MyDoom Internet worm claimed its first scalp Sunday, paralyzing the Web site of American software firm SCO Group with a massive data blitz.

The speed and severity of the attack surprised security officials. "It was spectacularly successful," said Mikko Hypponen, research manager at Finnish anti-virus firm F-Secure.

The MyDoom attack trigger was set for 1609 GMT Sunday. But with so many computer clocks incorrectly set, the infected machines began firing off data requests at SCO.com hours earlier, Hypponen said. "It will only get worse for SCO as time goes on," he added.

SCO is not alone. Microsoft Corp has been targeted by a second variant of MyDoom, dubbed MyDoom.B. That attack is timed to kick off Tuesday.

I doubt SCO cares much. You can tell that from the fact that they will discuss plans on Monday; they knew about the attack long enough but did nothing. Let's see what MS comes up with when it's their turn in a few days.

Comcast targets bandwidth 'abusers'

Found on Mercury News on Thursday, 29 January 2004
Browse Internet

By all accounts, George Nussbaum demands a lot from his Internet connection. He streams video and transfers large files from his office. His family downloads movie trailers and his stepson listens to and buys music online.

Nussbaum subscribes to his cable TV provider's high-speed Internet service, which, he thought, was built for such high-bandwidth activities. Then, in November, he got a letter from the provider, Comcast Corp., ordering him to dial down his usage or face service termination.

Nussbaum, who at first had no idea how many gigabytes he consumed, was willing to cut back. He called to find out by how much, but customer service had no answer. Then he asked how much he used. Again, Comcast wouldn't provide a number.

Wait, unlimited means limited? When I sign up for something that is called unlimited, I expect it to be so. But I guess it's easier to advertise with unlimited traffic and filter out users later. Marketing strategies...