Google
 

Archive for the ‘Spam and Email’ Category

New IETF WG for ARF

Tuesday, January 26th, 2010

After almost five years of work, the IETF finally chartered a new working group called MARF that will focusing on standardizing the Abuse Reporting Format that I first proposed back in 2005. This format is used between ISPs to facilitate automated reporting of spam activity. The first draft as written by ...

AOL to Switch to ARF

Wednesday, July 9th, 2008

Over three years ago I wrote a small draft to define a format for reporting spam that is readable by machines as well as humans. Three years later (a few weeks ago), AOL announced that they will be switching their feedback loops to that format. I am hoping it will ...

Spreading Comment and Trackback Spam Through Zombie Browsers

Tuesday, August 7th, 2007

Since my move to Wordpress, I have been noticing a lot of funny track back hits going back to my old Movable Type installation. First of all, all of these hits were coming back from different IP addresses and different browsers. Second, they all had the same refer. Something was ...

DomainKeys Gets Approved by IETF

Friday, May 25th, 2007

DomainKeys or DKIM, a standard for signing email which was proposed by Yahoo over 2 years ago, was finally approved by the IETF and published as RFC 4871. Congrats to all the people that made it possible.

Weird Email Problems and rDNS

Friday, April 27th, 2007

For the past few days I have been troubleshooting a very strange problem at one of my clients. They have a small Windos network of about 7 computers connected to the Internet through a single DSL line. Recently, they begun to experience slowdowns when sending email through Outlook - when ...

Why Paying People to Crack CAPTCHAs Might Be Good

Tuesday, January 23rd, 2007

Almost four years ago I posted about a spammer that was using a free porn site as a way to get people to solve CAPTCHAs (those annoying images that ask you to type in stuff). Two Slashdot stories from a few months back discuss how spammers might be hiring people ...

Security Breach at EmigrantDirect

Wednesday, December 6th, 2006

I had a high interest savings account with EmigrantDirect for about 1 1/2 years. About July of 2006 this year, Emigrant switched their providers for online banking, resulting in a new interface for their website. Shortly after that switch, I have begun to get spam messages on the email address ...

Anti-phishing “Virtual Keyboards” Cracked

Monday, November 27th, 2006

I recently had the pleasure of seeing someone login into an online bank (HSBC USA), which has recently started to use what they claim is "two factor authentication". In reality, it is simply two passwords - one entered via regular HTML form, and a second entered via a very annoying ...

SPF and Sender-ID RFCs Published

Thursday, May 4th, 2006

After over two years of work and arguments, the IETF finally published the RFCs for SPF and Sender-ID. They are as follows: RFC 4405 - SUBMITTER SMTP extensions to be used with Sender-ID RFC 4406 - main Sender-ID draft RFC 4407 - PRA algorithm (which is what Microsoft was trying to patent - ...

Pre-Holiday Housekeeping

Wednesday, April 12th, 2006

I spent some time today doing house keeping on some old projects and following up on some old blog posts: 1. A few months ago when I added tags, I noticed that Technorati did not pick them up. This is till the case but it has gotten much worse - I ...