Internet Based Attacks in a Physical World

scubacuda writes "In light of the /. backlash against Spam King, Alan Ralsky, (in which /.ers published his info online--including an overhead shot of his house--and signed him up for junk) Simon Beyers, Aviel Rubin, and David Kormann have written a report entitled Defending Against an Internetbased Attack on the Physical World. Bruce Schneier notes that there's no easy defence against such an attack, largely because companies want to make it easy for consumers to get their promotional information:'Subscribing someone to magazines and signing them up for embarrassing catalogs is an old trick, but it has limitations because it's physically difficult to do it on a large scale. But this attack exploits the automation properties of the Internet, the Web availability of catalog request forms, and the paper world of the post office and catalog mailings. All the pieces (that) are required for the attack to work.' But as Rubin and his colleagues point out, there's a real danger in this ploy, one that few people have likely thought about. 'A scenario could be imagined where an attacker would do this to delay the arrival of an important letter, to wreak havoc on the postal system for political reasons, or even worse, to serve as a diversion for a terrorist act, such as the mailing of a contaminated letter.'"

Comments

Oprah?

[Anonymous Coward]

I like big butts.

My ass is getting attacked by /. users!

[Anonymous Coward]

Screw the internet, what about my ass?

fukk u

[Anonymous Coward]

yer ass sucks biatch

TROLLS DO NOT GO TO CHRISTDOT.NET KTHX

[Anonymous Coward]

cuz trolling makes baby jeebus cry

Mandrake 9.1 or Redhat 9.0?

[Anonymous Coward]

\documentclass[12pt, letterpaper]{article}
\author{A.~Coward}
\title{ Mandrake 9.1 or Redhat 9.0?}
\begin{document}
\maketitle
\newpage
\ta bleofcontents
\newpage
\section{Questions}
So here's the question, should I install Mandrake 9.1 or Redhat 9.0 today? It's a tough call... Mandrake's version number is higher, which means that it has more features and the latest software, but Redhat has a nicer sounding name, plus its logo is cuter (a \emph{big} plus). What is the difference the different Linux "flavors" that each offers? Is Blue Curve nicer than Galaxy? Finally, I will be installing on my grandmother's Apple IIGS w/ 4MB RAM. Anyone hardware issues? Thanks
\end{document}

I'm a victim.

[Seth Finklestein]

Frankly, I'm surprised that Slashdot didn't come to me, internationally known cybersecurity activist Seth Finklestein, for advice on the matter. I have been abused like a tattered rag doll by Slashdot's own editor, Michael Sims.

Ever since Michael Sims' message "The Censorware Project is Closed," I have been kept awake at night by persistent phone calls and very loud e-mails sent by Michael. Mr. Sims has called me, my wife, my five internationally acclaimed children, and even my wife with vague threats against me.

I did absolutely nothing wrong at any point in my life. I am a shining beacon in a godless, hateful world. Please help me. I'm a victim.

DUDE THAT IS DISGUSTING!!!

[Anonymous Coward]

Yer website is just a ghey commune wher teh fags all try ot outdo goatse man, that is super disgusting.

Re:The Economist

[Acidic_Diarrhea]

But don't you see that the target of the current attack isn't always going to be the same. There is no reason that this DoS attack must be directed at spammers and spammers only. And the reason the spammer has brought this attack on himself is by upsetting a great number of people. Now, as the article mentions, a script which would simulate the large number of people could be written so that one person could launch the attack and sign a single person up for a huge amount of junk mail. So, basically - if you, as a non-spammer, upset someone with a modest amount of technical saavy, it could lead to the same type of DoS attack that this spammer is enduring.

There is no reason that only a spammer could be attacked in such a manner.

Re:The Economist

[Acidic_Diarrhea]

Third, all those requests would be coming from one IP address.

If I were going to take the time to create this type of script (or simply make it a distributed project where people submit sites that allow for junk mail to be produced and build an entire directory - not time consuming at all) why wouldn't I just use some MS Outlook exploit to have the attacks come from a number of nodes? Again, it's not neccescarily easy to get the project up and running but once it is, targets are a simple matter.

And you prove my point that this is not limited to just spammers. There is a certain amount of ironic justice in sending spam to a spammer but any figure that becomes infamous has a large number of people upset with him or her and thus, could bring this type of attack upon him.