The "flaw" that this virus capitalizes on is the user double clicking an attachment in an e-mail.
This virus could probably work just as well if the e-mail contained a hyperlink to an exe file on a website. The problems with that is admins would quickly learn to strip that address out of e-mails and that server would be shot. Imagine an e-mail card that you think you got from a friend that says "Go download this [recent holiday] card and play it! It is really cool!"
This is a very social problem. But educating people is hard, especially if they think they understand already.
Do yourself a couple of favors. Rip the CDs (do not encode MP3s, keep the WAV files), normalize the audio, and write yourself new audio CDs. Then, you still have the original and it doesn't get all scratched up and you have a set of CDs that have the same level.
Try setting up your mail server to only send to comcast's SMTP server instead of going directly to the wild net. Then AOL will see comcast's normal SMTP server instead of your dynamic server as the source.
IMarv. (Not that I know HOW this can be done, just that I've heard it can be done.)
Bayesian saves you time. (What you would use to hit delete.)
Graylisting saves your ISP money and your money for bandwidth. If you have a flat rate, it just means that your ISP can either make more money off your flat rate or maybe even lower the rate. (Or even make their business model work!)
You win because you don't have to set up Bayesian filtering, your ISP wins because it can thwart spam at the gate.
Good new is, the e-mail client isn't where this goes. So John and Jill don't need to do anything to their outlook or hotmail.
The bad news is, you have to convince your ISP to do this somehow because it has to be done as close to the spammer as possible. I suspect that some ISP will be more interested in this than others.
If they are a low volume spammer and don't get caught, you'll start getting all their mails nearly immediately when they are persistent. (Spammers can get you on the 36 day whitelist.)
However, they won't be doing enough volume to make this effective because they have to send only enough e-mail to make it look like normal e-mail activity for you. And they have to do it from the same IP and from name every time. These are some stiff ifs for a low volume deal. If they do enough to get noticed, they'll be put on a black list or better filtered as suspect.
If you are communicating with somebody more often than once a month, then just your first e-mail will be slow, all of them after that will be just as quick as today. If you aren't talking to them more often than once every 6 weeks or so, they aren't going to notice another hour.
Nah,
In six months, you start black listing the obvious patterns from spammers during that first hour.
Example: Why is random e-mail addresses at 123.234.158.42 sending 36000 e-mails to everybody from 1@mydomain.com to BBCACE@mydomain.com? I think he's trying to spam me, lets add him to my black list before he annoys the 3000 users I have in that range.
True, the key isn't difficult, but it is an excelent delaying tactic. The information you learn during that hour of holding can be used to stop the spammer in his tracks. The knowledge gained during that hour is far more valuable than the knowledge that it takes an hour to break this "key". If they added the subject line to the things to get before aborting, they could possibly even tell the intent of those thousands of e-mails coming from the new IP address. Perhaps by randomly letting a few get to the DATA section for analysis and then aborting.
The nice thing about this is that it lets you see a trend before it hits your users. This means that During that first hour, you can detect that you are being spammed and then turn around and blacklist the spammer for a month or so. Thus NONE of your users see ANY of the spam.
The moat isn't there to STOP your enemy, it is there to give your defenses time to heat up the oil to drop on them.
I was going with it as an autamotapea(sp?, and no the spell checker didn't know either). So pick a random chirping bird or better yet, those Easter Marshmellow birds seeking out pears.
Are there any reports of people who move to different countries to follow their job?
It is just an odd idea. If I sold my home, I'd be debt free and quite capable of adjusting the relative costs of living. I figure it is much harder when you move your debts to a location with a lower cost of living.
Depends on the company,
If you have corporate secrets that you don't want going out, you might want to know they are chatting them out to somebody and stop them.
Loosing that contract because your competetor knew sensitive information about your bid and creatively worded theirs to seem innocent but some-how slamming would be bad. So, one geek's salary to potentially land that multi-million dollar contract is a small price to pay. This could be complicated by the fact that there may be a business reason to use such software (morale?).
Or, they'll manually white-list the mailing list. I have a number of rules in Outlook Express for my various mailing lists. (Usually keyed off the list's name in the subject line.) The only real challenge would be the lists that don't change the from address, or a blocking system that doesn't let you also use the subject line.
You could look in your "challenge-response que" when you know you're expecting something from them. Or you could use one of the time-limited pre-approved e-mail addresses.
Mostly off topic question, but what do the numbers in parenthesis after command names mean? ls(1), cc(1), find(1), etc? Where should have I looked for the answer to a question like this?
I'm not sure how they did it, but they're confident in their count of five to four significant digits! I wonder if they got it notorized too.
IMarv PS For those who don't get it, this is a joke about the use of periods and commas to separate groups of numbers and to divide numbers into decimal fractions...
Here's the best way I have found to use Oracle LOBs and access in general. Oracle's ODBC driver is pretty good. It supports "LEFT JOIN" and "RIGHT JOIN" all you have to do is "FROM { oj tbl1 INNER JOIN tlb2 ON tbl1.fld1 = tlb2.fld1 } " and it is all good there.
Now, you use Microsoft ADO and use a loop with fld.GetChunk(128) and that is good. (Either keep a field to tell you how big it is or do special checks to see when you are done.)
Finally, make sure all your LOB fields are the LAST fields selected in your query (select * does not work) and use them after all your normal fields and your LOBs in selected order and things are good.
The documentation sucks that you can find online, and Oracle 8 is getting harder to find on oracle's site these days anyway.
I don't love it, but it works and meets the customer's requirements.
Have you considered the possibility that some people prefer reading large sums of new topics in natural light away from the computers.
Other times, I use real resources to find things because I have a lot of context already going on in the computer and I don't want to futhur complicate what I see.
I'm highly interested in this book because I've been meaning to get into Linux based web development for a while but had no firm starting point. I get Linux installed, and then it just sits there. At work, I currently work on a IIS VBS ASP website on NT 4 using Oracle 8i (on some UNIX server). My love for Microsoft is not great and would like to eventually move the site off of NT.
Because space itself is getting bigger, you would just see the opposite sides of the object both being redshifted. Think of space as the Ocean. You're on a boat and a friend another boat is sounding a horn. Neither you nor your friend is "moving" but the water itself is getting less dense which pushes you way from each other. Pretend you are on a small only-water planet. You can hear your friend's horn getting quieter and in lower pitch as the planet-ocean expands. It's a really loud horn that the water somehow doesn't transmit but the air does (and the air miraculously doens't change density.) and you both have floated to the opposite sides of the planet. Now you hear the down-shifted sound coming from all directions. Because the planet is getting bigger, you aren't getting closer to your friend from either side, but his horn is so loud you can still hear it, but with doppler-effect away from all sides.
My girlfriend is the front desk manager at a hotel. From what she has told me, I feel that people take NO initiative when it comes to doing anything. If you find someone who is willing to take initiative, they're probably worth a few magnitudes of their weight in gold.
Slashdot Mirror
Their earlier opinion at E3.
I think there's one more somewhere.
Andy
The "flaw" that this virus capitalizes on is the user double clicking an attachment in an e-mail.
This virus could probably work just as well if the e-mail contained a hyperlink to an exe file on a website. The problems with that is admins would quickly learn to strip that address out of e-mails and that server would be shot. Imagine an e-mail card that you think you got from a friend that says "Go download this [recent holiday] card and play it! It is really cool!"
This is a very social problem. But educating people is hard, especially if they think they understand already.
If you kill the person who steals your identity, is it suicide?
IMarv
Do yourself a couple of favors. Rip the CDs (do not encode MP3s, keep the WAV files), normalize the audio, and write yourself new audio CDs. Then, you still have the original and it doesn't get all scratched up and you have a set of CDs that have the same level.
IMarv
Try setting up your mail server to only send to comcast's SMTP server instead of going directly to the wild net. Then AOL will see comcast's normal SMTP server instead of your dynamic server as the source.
IMarv.
(Not that I know HOW this can be done, just that I've heard it can be done.)
hmm, funny. From the reviews I have read, that sounds pretty much like the plot. Perhaps some emperical data needs to be collected...
IMarv
Bayesian saves you time. (What you would use to hit delete.)
Graylisting saves your ISP money and your money for bandwidth. If you have a flat rate, it just means that your ISP can either make more money off your flat rate or maybe even lower the rate. (Or even make their business model work!)
You win because you don't have to set up Bayesian filtering, your ISP wins because it can thwart spam at the gate.
IMarvinTPA
Good new is, the e-mail client isn't where this goes. So John and Jill don't need to do anything to their outlook or hotmail.
The bad news is, you have to convince your ISP to do this somehow because it has to be done as close to the spammer as possible. I suspect that some ISP will be more interested in this than others.
If they are a low volume spammer and don't get caught, you'll start getting all their mails nearly immediately when they are persistent. (Spammers can get you on the 36 day whitelist.)
However, they won't be doing enough volume to make this effective because they have to send only enough e-mail to make it look like normal e-mail activity for you. And they have to do it from the same IP and from name every time. These are some stiff ifs for a low volume deal. If they do enough to get noticed, they'll be put on a black list or better filtered as suspect.
If you are communicating with somebody more often than once a month, then just your first e-mail will be slow, all of them after that will be just as quick as today. If you aren't talking to them more often than once every 6 weeks or so, they aren't going to notice another hour.
IMarv
Nah,
In six months, you start black listing the obvious patterns from spammers during that first hour.
Example: Why is random e-mail addresses at 123.234.158.42 sending 36000 e-mails to everybody from 1@mydomain.com to BBCACE@mydomain.com?
I think he's trying to spam me, lets add him to my black list before he annoys the 3000 users I have in that range.
IMarvin
True, the key isn't difficult, but it is an excelent delaying tactic. The information you learn during that hour of holding can be used to stop the spammer in his tracks.
The knowledge gained during that hour is far more valuable than the knowledge that it takes an hour to break this "key".
If they added the subject line to the things to get before aborting, they could possibly even tell the intent of those thousands of e-mails coming from the new IP address. Perhaps by randomly letting a few get to the DATA section for analysis and then aborting.
IMarvinTPA
The nice thing about this is that it lets you see a trend before it hits your users. This means that During that first hour, you can detect that you are being spammed and then turn around and blacklist the spammer for a month or so. Thus NONE of your users see ANY of the spam.
The moat isn't there to STOP your enemy, it is there to give your defenses time to heat up the oil to drop on them.
IMarvinTPA
I was going with it as an autamotapea(sp?, and no the spell checker didn't know either). So pick a random chirping bird or better yet, those Easter Marshmellow birds seeking out pears.
IMarv
Are there any reports of people who move to different countries to follow their job?
It is just an odd idea.
If I sold my home, I'd be debt free and quite capable of adjusting the relative costs of living. I figure it is much harder when you move your debts to a location with a lower cost of living.
IMarv
Depends on the company,
If you have corporate secrets that you don't want going out, you might want to know they are chatting them out to somebody and stop them.
Loosing that contract because your competetor knew sensitive information about your bid and creatively worded theirs to seem innocent but some-how slamming would be bad.
So, one geek's salary to potentially land that multi-million dollar contract is a small price to pay. This could be complicated by the fact that there may be a business reason to use such software (morale?).
Just a possibility.
IMarv
Or, they'll manually white-list the mailing list. I have a number of rules in Outlook Express for my various mailing lists. (Usually keyed off the list's name in the subject line.) The only real challenge would be the lists that don't change the from address, or a blocking system that doesn't let you also use the subject line.
IMarv
You could look in your "challenge-response que" when you know you're expecting something from them.
Or you could use one of the time-limited pre-approved e-mail addresses.
Take your pick,
IMarv
Mostly off topic question, but what do the numbers in parenthesis after command names mean?
ls(1), cc(1), find(1), etc?
Where should have I looked for the answer to a question like this?
Thanks,
IMarv
I'm not sure how they did it, but they're confident in their count of five to four significant digits! I wonder if they got it notorized too.
IMarv
PS For those who don't get it, this is a joke about the use of periods and commas to separate groups of numbers and to divide numbers into decimal fractions...
Here's the best way I have found to use Oracle LOBs and access in general.
Oracle's ODBC driver is pretty good. It supports "LEFT JOIN" and "RIGHT JOIN" all you have to do is "FROM { oj tbl1 INNER JOIN tlb2 ON tbl1.fld1 = tlb2.fld1 } " and it is all good there.
Now, you use Microsoft ADO and use a loop with fld.GetChunk(128) and that is good. (Either keep a field to tell you how big it is or do special checks to see when you are done.)
Finally, make sure all your LOB fields are the LAST fields selected in your query (select * does not work) and use them after all your normal fields and your LOBs in selected order and things are good.
The documentation sucks that you can find online, and Oracle 8 is getting harder to find on oracle's site these days anyway.
I don't love it, but it works and meets the customer's requirements.
IMarv
Have you considered the possibility that some people prefer reading large sums of new topics in natural light away from the computers.
Other times, I use real resources to find things because I have a lot of context already going on in the computer and I don't want to futhur complicate what I see.
I'm highly interested in this book because I've been meaning to get into Linux based web development for a while but had no firm starting point. I get Linux installed, and then it just sits there. At work, I currently work on a IIS VBS ASP website on NT 4 using Oracle 8i (on some UNIX server). My love for Microsoft is not great and would like to eventually move the site off of NT.
IMarv
I think that that BSD is the best.
How about you?
IMarv
For some reason, all I can think about now is the scene just before Arthur and Ford are put into the Airlock.
"Sure the hours are great, but what about the actual minutes?" -Ford
IMarv
Because space itself is getting bigger, you would just see the opposite sides of the object both being redshifted.
Think of space as the Ocean. You're on a boat and a friend another boat is sounding a horn. Neither you nor your friend is "moving" but the water itself is getting less dense which pushes you way from each other. Pretend you are on a small only-water planet. You can hear your friend's horn getting quieter and in lower pitch as the planet-ocean expands. It's a really loud horn that the water somehow doesn't transmit but the air does (and the air miraculously doens't change density.) and you both have floated to the opposite sides of the planet. Now you hear the down-shifted sound coming from all directions.
Because the planet is getting bigger, you aren't getting closer to your friend from either side, but his horn is so loud you can still hear it, but with doppler-effect away from all sides.
IMarv
My girlfriend is the front desk manager at a hotel. From what she has told me, I feel that people take NO initiative when it comes to doing anything. If you find someone who is willing to take initiative, they're probably worth a few magnitudes of their weight in gold.
IMarv
I can't wait for them to break off and fall into the ocean...
I just need to remember and buy some prospective coast line land.
Until then, the best I can do is write a letter asking for the law to be ammended.
IMarv