Google
 

Archive for the ‘Spam and Email’ Category

AOL to Switch to ARF

Wednesday, July 9th, 2008

Over three years ago I wrote a small draft to define a format for reporting spam that is readable by machines as well as humans. Three years later (a few weeks ago), AOL announced that they will be switching their feedback loops to that format. I am hoping it will ...

Spreading Comment and Trackback Spam Through Zombie Browsers

Tuesday, August 7th, 2007

Since my move to Wordpress, I have been noticing a lot of funny track back hits going back to my old Movable Type installation. First of all, all of these hits were coming back from different IP addresses and different browsers. Second, they all had the same refer. Something was ...

DomainKeys Gets Approved by IETF

Friday, May 25th, 2007

DomainKeys or DKIM, a standard for signing email which was proposed by Yahoo over 2 years ago, was finally approved by the IETF and published as RFC 4871. Congrats to all the people that made it possible.

Weird Email Problems and rDNS

Friday, April 27th, 2007

For the past few days I have been troubleshooting a very strange problem at one of my clients. They have a small Windos network of about 7 computers connected to the Internet through a single DSL line. Recently, they begun to experience slowdowns when sending email through Outlook - when ...

Why Paying People to Crack CAPTCHAs Might Be Good

Tuesday, January 23rd, 2007

Almost four years ago I posted about a spammer that was using a free porn site as a way to get people to solve CAPTCHAs (those annoying images that ask you to type in stuff). Two Slashdot stories from a few months back discuss how spammers might be hiring people ...

Security Breach at EmigrantDirect

Wednesday, December 6th, 2006

I had a high interest savings account with EmigrantDirect for about 1 1/2 years. About July of 2006 this year, Emigrant switched their providers for online banking, resulting in a new interface for their website. Shortly after that switch, I have begun to get spam messages on the email address ...

Anti-phishing “Virtual Keyboards” Cracked

Monday, November 27th, 2006

I recently had the pleasure of seeing someone login into an online bank (HSBC USA), which has recently started to use what they claim is "two factor authentication". In reality, it is simply two passwords - one entered via regular HTML form, and a second entered via a very annoying ...

SPF and Sender-ID RFCs Published

Thursday, May 4th, 2006

After over two years of work and arguments, the IETF finally published the RFCs for SPF and Sender-ID. They are as follows: RFC 4405 - SUBMITTER SMTP extensions to be used with Sender-ID RFC 4406 - main Sender-ID draft RFC 4407 - PRA algorithm (which is what Microsoft was trying to patent - ...

Pre-Holiday Housekeeping

Wednesday, April 12th, 2006

I spent some time today doing house keeping on some old projects and following up on some old blog posts: 1. A few months ago when I added tags, I noticed that Technorati did not pick them up. This is till the case but it has gotten much worse - I ...

When Blacklisting Goes Bad

Monday, March 6th, 2006

UPDATE: This has been fixed Earlier today I ran across a post at Brian Krepp's security blog at the Washington Post about an add-on called "SiteAdvisor" which claims to provide helpful feedback when browsing as to whether a specific site is secure or not, whether it carries spyware, etc. First, I tried ...

IAB Rejects SPF Appeal

Thursday, March 2nd, 2006

Following on the heels of an IESG appeal rejection back in December, the IAB announced today that they rejected the appeal of the SPF community and upheld the original IESG decision to publish both Sender-ID and SPF documents. The particular problem was that Microsoft's Sender-ID piggied back on the SPF ...

Classfieds based on Tagging and RSS

Saturday, February 18th, 2006

A new company called EdgeIO is developing a new type of classfieds services - items tagged with the tag "listing" in people's blog will be automatically picked up and indexed into something like Craiglist (more info here). One very interesting question - how do they deal with tag spam?

NY Times Article on Goodmail and AOL

Saturday, February 4th, 2006

Dave Winer points to a NY Times story on the use of Goodmail by AOL which I pointed out eariler. Apparently, Yahoo is on the act as well.

AOL to Charge Senders for Some Emails?

Thursday, February 2nd, 2006

A recent post on Circle-ID by Matt Blumberg states that AOL is planning to charge some commercial senders for specific types of emails. A related story makes things a bit more clearer: In a bid to protect its members from e-mail fraud and phishing, and to offer consistency to commercial e-mail ...

DomainKeys WG Chartered by the IETF

Friday, January 6th, 2006

After over a year of pre-WG work, the IETF finally chartered a new WG to work on DKIM (merger of Yahoo's DomainKeys and Cisco's IdenfitiedMail). John Levine has more on this.

Weird Comment Spam

Saturday, December 10th, 2005

In the past two days or so, my blog got hit with another comment spam barrage. However, this time it was very weird - most of the sites advertised were commons ones like "yahoo.com" and "bbc.co.uk". I don't think that they would actually pay some spammer to do that. Another ...

SPF Appeals Against Sender-ID Are Rejected By IETF

Saturday, December 10th, 2005

Andy mentions on his blog that the IETF rejected SPF community's appeals against Sender-ID. One appeal was focused on the fact the SPF records are being reused by Sender-ID in an incompatible fashion. The other appeal focused on non-standard Resent header processing. Both were rejected BUT the IESG added two ...