I dont know how up to date this list is. But a quick google will show you plenty of other lists of unpatched IE flaws. Personally I gave up using IE when my system was crapped out by 180 solutions spyware that was using a variation of a supposedly patched flaw (the patch was later updated).
Brown told us "Since CentralNic does not run an email server on the main domains it owns either, email and spam problems have also not been the issue they were with VeriSign's SiteFinder."
Nuh, the reason spam isn't the same problem like it was with the Verisign wildcarding is that spammers dont seem to use anydomain.uk.com in their forged addresses so who cares if the domain resolves or not? (I guess someone *must* get spam from somedomain.uk.com but my logs dont show any mail from any.uk.com domains for the past month)
I guess I now need to setup a rule so that any mail from a domain that resolves to 213.146.149.160 is rejected as spammers will most likely jump on this.
How does 4kmh over in 110kmh zone fit with Australian Design Rule 18? I thought ADR 18 said that speedos had to be accurate within 10% of the true speed of the vehicle.
The SCO Group is just that, The SCO Group. Sure the Santa Cruz Operation was the acronym for SCO in old SCO/Tarantella times, but since Caldera changed its name to The SCO Group in 2002 it doesn't appear that SCO in The SCO Group is an acronym or that it actually means anything.
Problem is that when spammers are using bot armies of millions of machines, resource costs aren't such a barrier for them.
The downside of grey-listing is that the easiest way for spammers to circumvent it is to simply use their bots to flood a recipient mailbox with the same message again and again until the greylisting timeout expires and the message(s) is accepted. To the recipient MTA there is very little difference between a proper message being retried and a spambot crapflooding the hell out of a mailbox - especially since some MTAs make a really poor job of being standards compliant and seem to take a 4xx temporary error as an invitation for an all out DOS to try and get their message delivered.
This has the unfortunate side effect of spam zombies sending 100s of copies of the same message for hours at a time. And on systems without greylisting it means a huge increase in duplicate spams being received.
Back on topic, our firewalls monitor evidence of port scanning. This is something you'd better not get caught doing since they're so destructive to the network (I.E. something like a network-aware electron microscope or CAT scanner will often crash if you send fragmented SYN packets at it, so don't).
If its possible for script kiddies to crash CAT scanners by doing port scans from your ISP then:-
1. The person who connected the CAT scanner to the Internet (or any untrusted network) should be sacked.
2. The vendor of the CAT scanner should provide a software update that stops such a critical piece of equipment from being so fragile and/or be sued for not fixing defective equipment.
3. The security/network admin at the hospital should be sacked for incompetence.
And finally you should slap the script kiddie on the wrist for being a bad boy. If badly crafted packets can kill critical equipment and people are stupid enough to connect that equipment to networks that are full of badly crafted packets then most of the blame surely lies with the owner and the vendor of the equipment.
Try complaining to the bank or other business being targeted, and identify the ISP in your complaint.
I do/did. For example here is a link to a submit form that is used in a paypal phish to collect credit card and account details. It then redirects to the real paypal logon using the phished credentials. I advised Yahoo (the ISP) and Paypal a month ago and the site is still up.
I don't know for a fact he was sane - but he was no more unstable/dellusional than most. He certainly wasn't a shining beacon of rational thought, but then again what percentage of people are? The fact that a court determined that he was insane and saw fit that he should be incarcerated is most probably enough proof that he was insane, no?
Yeah, whether or not I should have acted is a fair question. But then again what could have been done? Someone else held all the cards. When the odds are stacked up like they were and the guy wasn't willing to fight back (when he was still able I advised him to get really good legal representation - once you've been deemed mentally unsound all bets are off) then it really is a fool's errand.
I didn't hang him out to dry. Maybe in some fantasy world I could have saved the day. But in reality self preservation is a strong motivation and these people were playing for keeps - shit they f'ed over their own son, what would they do to some meddlesome stranger? I really didn't want to know.
this speed can make such attacks hard to track and prevent
Speed? Speed doesn't seem to be a requirement for a successful phish. I've given up complaining to ISPs who are hosting phishing sites because there seems to be no action taken against them. Sure if the site is on a compromised server in Korea or Vietnam I dont expect much, but when its a mainstream US ISP its a bit disheartening to get either an auto-responder or no response and then see that the site is still up weeks after bothering to tell them.
Re:Tinfoil Hat Jokes aside
on
Tinfoil Hat House
·
· Score: 4, Insightful
I knew this guy who was given millions and a large shareholding in a public company by his father. He had to play by his father's (and stepmother's) rules which he wasn't doing and he seemed to think it was funny to aggravate them. So they hired some spooks to follow him and eavesdrop on him. He was never the sharpest knife in the draw and years of ADD drugs didn't help. So when he started getting paranoid and having "dellusional fantasies" about people spying on him and his house - which they were actually doing - this was the proof used to incarcerate him in a mental institution. Last time I saw him he was on drugs that had completely extinguished his mind. I am sure people much more qualified than I would testify that he was really schizophrenic (and they did when he was incarcerated) but its pretty sad that the proof of someone's psychosis can be engineered by simply spying on them and then telling them that they are paranoid - how do I know he was being spied on? His stepmother warned me off and offered photos showing that I had also been under observation.
Obviously someone putting tin foil all over their house is a fair indication that their mental state should be questioned. But malicious people can (and do) take advantage of the common perception that paranoia about being spied on is proof positive of schizophrenia for the own nefarious purposes. Never underestimate how mean spirited and avaricious some people are.
I really dont understand attitudes like this. Sure if Linux cost big money (like Windows) and had all sorts of licensing restrictions (like Windows) then there would be significant hurdles to adoption, BUT, for basically zero cost you can get all sorts of really useful network services like DNS, NTP, HTTP, DHCP, SQUID, SMB, IPTABLES (for NAT, firewalls, firewalling bridges, etc), SMTP gateways/forwarders, great spam filters like spamassassin, MRTG, LDAP, BACKUP-PC, and much, much more. And these services aren't flaky but are basically best of breed. If you cant afford reasonable hardware but feel these services are somewhat critical then you can use the built in RAID, and clustering/redundancy which is available for no extra cost. And if your Windows boxes crap out then you can use Linux to do recovery on them - Knoppix is great for this. Why wouldn't you be considering Linux - is there a downside here?
15,000 to 1 really isn't meaningless. What it means is that most Zimbabwean's can't afford to eat and certainly can't afford to buy any imported goods. Hell before the debasement of the currency a Zim dollar was actually worth something.
And even though we think a Zim dollar is basically worthless, to an average Zimbabwean living in abject poverty a Zim dollar is real money. Many live on less than 800 Zim dollars a month.
"The Zimbabwean dollar is pegged at 6,200 against the US dollar, yet on the black market last week it traded for over 13,000 to greenback.
Zimbabwe is mired in its worst-ever economic crisis, with a triple-digit inflation rate, unemployment levels over 70% and the critical lack of foreign currency."
PS It costs 30,000 Zim dollars for a coffee at a nice restaurant in Harare - but they prefer you to pay in US$.
What media apologist has mod points today? The parent post is informative and/or interesting - it certainly is not a troll. Just in case the tards who modded it troll are confused here is a clue for you.
If the company is real, a local TV station sounds real, then you should just phone them up and ask them to stop sending the mail to you. Whenever I've struck this problem, actually phoning the people up and talking directly to the person responsible or the tech staff resolves it, whereas sending unsubscribe request, after unsubscribe request hasn't worked at all. Obviously YMMV but these people usually haven't got anything to gain by continuing to send the stuff and are completely clueless that there is a problem, and once asked they'll stop it straight away.
Arrogant? HTF do you get that from my post? It seemed to me that the parent was suggesting that once the current Remnimbi peg was removed, exchange rate changes would lead to wage parity between China and the US. In my view its unlikely that wage parity could ever occur as the financial dynamics of the world would have to change so dramatically that there would be complete meltdown of the global economy which would cause such dislocation that wage parity would be the least of people's problems.
Who predicted the NASDAQ would fall as far as it did when the bubble burst? Name one person?
Sure. Robert Pretcher. But there were plenty of others, David Tice, Kurt Richenbacher, I'm pretty sure Dr Doom and Gloom Marc Faber thought it would fall further (it may still), even Steve Roach Chief Economist of Morgan Stanley predicted the fall.
I may well be arrogant but I think you may have missed the theme of my post.
Once China stops pegging the value of its currency to the dollar, the yuan will go up while the dollar will decline further. My point? Even if foreign companies get good enough to compete with US companies, they won't be able to compete on cost as the dollar declines and comes into equilibrium with their currencies.
You may be underestimating the wage difference between China and the US. It is VERY big. Currently the wage for a qualified software developer in China is ~US$5000/year. Do you honestly expect the Chinese Renminbi to appreciate 1000% or the US$ to depreciate 90%? That is the stuff of financial meltdown and wage parity between tech workers in the US and China due to exchange rate changes is really unlikely to occur in the foreseeable future, if at all.
And the peg and its effect on wage/trade parity is not as cut and dry as some would have. Much of the manufacturing in China will not be greatly affected by a revaluation of the Renminbi as many of the contracts for raw materials and sales are written in US$. The only impact it will have is on the local cost components which are not a large percentage of the equation. This is because much of the manufacturing in China is done by foreign companies - its not as though lots of Chinese companies are manufacturing lots of Chinese products and exporting them to the US, much of the exported manufacturing is done by US companies who have offshored their manufacturing plants to China - once again the US/Renminbi rate has little bearing here as everything is basically denominated in US$. Which means that even if the peg is removed the US$/Renminbi exchange rate is unlikely to change as much as simple trade surplus based economics suggests it will, more likely is that the Chinese central bank will no longer need to buy huge amounts of T-bills to maintain the peg and this is likely to cause more pain than gain for the US economy and US$ - Walmart will still be able to sell cheap Chinese made stuff, there will still be a huge wage disparity between the US and China, but interest rates in the US will surge as the foreign debt is no longer underpinned by huge foreign purchases of T-bills
I've noticed that some of my users get over 100 copies of the same spam from the same IP in the space of 45 to 60 minutes. Normally pharmacy or porn spam from compromised dial-ups and all with the same structure and URLs so its the same spammers doing it again and again.
This started about 2 months ago and I didn't understand why and thought it may be broken spamware - but then it crossed my mind that this is most likely an attempt to force delivery to hosts which use greylisting. Unfortunatley greylisting doesn't take into account mailbombs and they'll get through if enough new connections are opened from the same IP, same sender to the same recipient for long enough.
Forced me hack my system to rate limit spam and auto blacklist the source IPs of this crap (at least it stops the 100s of duplicates of the original spam).
There was a discussion about auto update of both definitions and scan engines being a security risk some time ago on Full Disclosure (I think it started as a Windows Update thread). This event just goes to show that software which auto updates should be used with caution and controls are required if its going to be used on critical systems, ie any updates need to be tested prior to roll out. Whether or not this can be viewed as a security incident is debatable, but software which downloads updates that cause a DOS are usually viewed as malicious. I wonder about the cruft like Plaxo (and all that other supposedly safe stuff) which download updates all the time, I can't stop it (not for technical reasons;) but I'm just waiting for the day an auto downloaded update craps out some VP's laptop.
MarketScore is included on the Black Hole DNS List
on
Spyware or Researchware?
·
· Score: 3, Informative
anti-spyware utility manufacturers are still thinking whether to include it on their list
If you use the blackhole dns list of spyware domains from bleedingsnort.com its already included based on this submission from doxdesk. Squid ACLs are a great way to stop these parasites and you don't have to wait for anti-spyware manufacturers to decide whether its spyware or not. Also ClamAV lets you create your own signatures so you can setup rules to detect anything you consider to be spyware.
Yeah me too and I'm not Canadian or American! 20 years ago I was with some friends who decided to do a beer run over the US border from Ontario with me in the pickup truck! I was pretty nervous but the border guards didn't even bat an eye - the only question was on the return journey when they were much more interested in whether we had too much beer than who was in the car.
(Asserting the phone or mail systems aren't relevant does not make it so. I'd be interested in proof)
The laws for services provided by common carriers are very different from those for private companies. Telcos are common carriers and they are not legally able to refuse service in the same way that private networks can. (Please take a look at the Telco act). The postal service is also governed by different laws than private companies, DHL can refuse to carry your package without explanation, whereas the postal service needs to have a legally valid reason per the postal laws.
And as I mentioned the Internet is comprised of private networks and thus is legally very different from the post and telephone - which is why it struck me that capt kangarooski's point about the landline and mail slot were unreasonable. I think the case of AGIS shows that other networks on the Internet do not have to interconnect to you or carry your traffic.
If you turned on a mailserver to accept incoming connections from the Internet at large and were then surprised you got a lot of mail you don't want then you have a fundamental misunderstanding of how the Internet works these days.
Obviously mail is completely broken and spammers and virus writers have clagged it. But this is not the point, we were talking about private networks and initially it was about spam being free speech and the right of spammers to send their junk onto other people's networks.
It seems that capt kangarooski has a bee in his bonnet over spam being free speech - no not the ponzi scheme promoting, pornography peddling, fake medicine prescribing, pirated software selling, get your penis extension here, junk - but that other good spam. Is advertising free speech?
Why is this post moded as insightful? How can anyone (even someone as obtuse as a lawyer who argues that spam is somehow free speech) in anyway compare phone lines and the postal service with the Internet and email?
Either you are a troll or completely ignorant of the law. I think the Telecommunications Act of 1996 should provide you with enough clues as to how clueless your telephone analogy actually is. And the postal service one doesn't even warrant a reply. These are endpoints of basically public utilities (or common carriers) and very different laws apply to them than to private networks.
The Internet is comprised of interconnected networks - the IP in TCP/IP stands for Internet Protocol and means that networks are interconnected together. Here's a newsflash for you, these networks are private and really, no matter what your opinion may be, they aren't open to anyone to use and/or abuse.
Slashdot Mirror
I dont know how up to date this list is. But a quick google will show you plenty of other lists of unpatched IE flaws. Personally I gave up using IE when my system was crapped out by 180 solutions spyware that was using a variation of a supposedly patched flaw (the patch was later updated).
Brown told us "Since CentralNic does not run an email server on the main domains it owns either, email and spam problems have also not been the issue they were with VeriSign's SiteFinder."
.uk.com domains for the past month)
Nuh, the reason spam isn't the same problem like it was with the Verisign wildcarding is that spammers dont seem to use anydomain.uk.com in their forged addresses so who cares if the domain resolves or not? (I guess someone *must* get spam from somedomain.uk.com but my logs dont show any mail from any
I guess I now need to setup a rule so that any mail from a domain that resolves to 213.146.149.160 is rejected as spammers will most likely jump on this.
How does 4kmh over in 110kmh zone fit with Australian Design Rule 18? I thought ADR 18 said that speedos had to be accurate within 10% of the true speed of the vehicle.
The SCO Group is just that, The SCO Group. Sure the Santa Cruz Operation was the acronym for SCO in old SCO/Tarantella times, but since Caldera changed its name to The SCO Group in 2002 it doesn't appear that SCO in The SCO Group is an acronym or that it actually means anything.
Problem is that when spammers are using bot armies of millions of machines, resource costs aren't such a barrier for them.
The downside of grey-listing is that the easiest way for spammers to circumvent it is to simply use their bots to flood a recipient mailbox with the same message again and again until the greylisting timeout expires and the message(s) is accepted. To the recipient MTA there is very little difference between a proper message being retried and a spambot crapflooding the hell out of a mailbox - especially since some MTAs make a really poor job of being standards compliant and seem to take a 4xx temporary error as an invitation for an all out DOS to try and get their message delivered.
This has the unfortunate side effect of spam zombies sending 100s of copies of the same message for hours at a time. And on systems without greylisting it means a huge increase in duplicate spams being received.
If its possible for script kiddies to crash CAT scanners by doing port scans from your ISP then:-
1. The person who connected the CAT scanner to the Internet (or any untrusted network) should be sacked.
2. The vendor of the CAT scanner should provide a software update that stops such a critical piece of equipment from being so fragile and/or be sued for not fixing defective equipment.
3. The security/network admin at the hospital should be sacked for incompetence.
And finally you should slap the script kiddie on the wrist for being a bad boy. If badly crafted packets can kill critical equipment and people are stupid enough to connect that equipment to networks that are full of badly crafted packets then most of the blame surely lies with the owner and the vendor of the equipment.
The spamhaus xbl is meant to be an RBL of spam zombies.
Try complaining to the bank or other business being targeted, and identify the ISP in your complaint.
I do/did. For example here is a link to a submit form that is used in a paypal phish to collect credit card and account details. It then redirects to the real paypal logon using the phished credentials. I advised Yahoo (the ISP) and Paypal a month ago and the site is still up.
I don't know for a fact he was sane - but he was no more unstable/dellusional than most. He certainly wasn't a shining beacon of rational thought, but then again what percentage of people are? The fact that a court determined that he was insane and saw fit that he should be incarcerated is most probably enough proof that he was insane, no?
Yeah, whether or not I should have acted is a fair question. But then again what could have been done? Someone else held all the cards. When the odds are stacked up like they were and the guy wasn't willing to fight back (when he was still able I advised him to get really good legal representation - once you've been deemed mentally unsound all bets are off) then it really is a fool's errand.
I didn't hang him out to dry. Maybe in some fantasy world I could have saved the day. But in reality self preservation is a strong motivation and these people were playing for keeps - shit they f'ed over their own son, what would they do to some meddlesome stranger? I really didn't want to know.
this speed can make such attacks hard to track and prevent
Speed? Speed doesn't seem to be a requirement for a successful phish. I've given up complaining to ISPs who are hosting phishing sites because there seems to be no action taken against them. Sure if the site is on a compromised server in Korea or Vietnam I dont expect much, but when its a mainstream US ISP its a bit disheartening to get either an auto-responder or no response and then see that the site is still up weeks after bothering to tell them.
I knew this guy who was given millions and a large shareholding in a public company by his father. He had to play by his father's (and stepmother's) rules which he wasn't doing and he seemed to think it was funny to aggravate them. So they hired some spooks to follow him and eavesdrop on him. He was never the sharpest knife in the draw and years of ADD drugs didn't help. So when he started getting paranoid and having "dellusional fantasies" about people spying on him and his house - which they were actually doing - this was the proof used to incarcerate him in a mental institution. Last time I saw him he was on drugs that had completely extinguished his mind. I am sure people much more qualified than I would testify that he was really schizophrenic (and they did when he was incarcerated) but its pretty sad that the proof of someone's psychosis can be engineered by simply spying on them and then telling them that they are paranoid - how do I know he was being spied on? His stepmother warned me off and offered photos showing that I had also been under observation.
Obviously someone putting tin foil all over their house is a fair indication that their mental state should be questioned. But malicious people can (and do) take advantage of the common perception that paranoia about being spied on is proof positive of schizophrenia for the own nefarious purposes. Never underestimate how mean spirited and avaricious some people are.
At my job we are NOT considering Linux
I really dont understand attitudes like this. Sure if Linux cost big money (like Windows) and had all sorts of licensing restrictions (like Windows) then there would be significant hurdles to adoption, BUT, for basically zero cost you can get all sorts of really useful network services like DNS, NTP, HTTP, DHCP, SQUID, SMB, IPTABLES (for NAT, firewalls, firewalling bridges, etc), SMTP gateways/forwarders, great spam filters like spamassassin, MRTG, LDAP, BACKUP-PC, and much, much more. And these services aren't flaky but are basically best of breed. If you cant afford reasonable hardware but feel these services are somewhat critical then you can use the built in RAID, and clustering/redundancy which is available for no extra cost. And if your Windows boxes crap out then you can use Linux to do recovery on them - Knoppix is great for this. Why wouldn't you be considering Linux - is there a downside here?
15,000 to 1 really isn't meaningless. What it means is that most Zimbabwean's can't afford to eat and certainly can't afford to buy any imported goods. Hell before the debasement of the currency a Zim dollar was actually worth something.
And even though we think a Zim dollar is basically worthless, to an average Zimbabwean living in abject poverty a Zim dollar is real money. Many live on less than 800 Zim dollars a month.
"The Zimbabwean dollar is pegged at 6,200 against the US dollar, yet on the black market last week it traded for over 13,000 to greenback.
Zimbabwe is mired in its worst-ever economic crisis, with a triple-digit inflation rate, unemployment levels over 70% and the critical lack of foreign currency."
PS It costs 30,000 Zim dollars for a coffee at a nice restaurant in Harare - but they prefer you to pay in US$.
What media apologist has mod points today? The parent post is informative and/or interesting - it certainly is not a troll. Just in case the tards who modded it troll are confused here is a clue for you.
If the company is real, a local TV station sounds real, then you should just phone them up and ask them to stop sending the mail to you. Whenever I've struck this problem, actually phoning the people up and talking directly to the person responsible or the tech staff resolves it, whereas sending unsubscribe request, after unsubscribe request hasn't worked at all. Obviously YMMV but these people usually haven't got anything to gain by continuing to send the stuff and are completely clueless that there is a problem, and once asked they'll stop it straight away.
Liger your favorite animal? - here's the scary truth!!
Arrogant? HTF do you get that from my post? It seemed to me that the parent was suggesting that once the current Remnimbi peg was removed, exchange rate changes would lead to wage parity between China and the US. In my view its unlikely that wage parity could ever occur as the financial dynamics of the world would have to change so dramatically that there would be complete meltdown of the global economy which would cause such dislocation that wage parity would be the least of people's problems.
Who predicted the NASDAQ would fall as far as it did when the bubble burst? Name one person?
Sure. Robert Pretcher. But there were plenty of others, David Tice, Kurt Richenbacher, I'm pretty sure Dr Doom and Gloom Marc Faber thought it would fall further (it may still), even Steve Roach Chief Economist of Morgan Stanley predicted the fall.
I may well be arrogant but I think you may have missed the theme of my post.
Once China stops pegging the value of its currency to the dollar, the yuan will go up while the dollar will decline further. My point? Even if foreign companies get good enough to compete with US companies, they won't be able to compete on cost as the dollar declines and comes into equilibrium with their currencies.
You may be underestimating the wage difference between China and the US. It is VERY big. Currently the wage for a qualified software developer in China is ~US$5000/year. Do you honestly expect the Chinese Renminbi to appreciate 1000% or the US$ to depreciate 90%? That is the stuff of financial meltdown and wage parity between tech workers in the US and China due to exchange rate changes is really unlikely to occur in the foreseeable future, if at all.
And the peg and its effect on wage/trade parity is not as cut and dry as some would have. Much of the manufacturing in China will not be greatly affected by a revaluation of the Renminbi as many of the contracts for raw materials and sales are written in US$. The only impact it will have is on the local cost components which are not a large percentage of the equation. This is because much of the manufacturing in China is done by foreign companies - its not as though lots of Chinese companies are manufacturing lots of Chinese products and exporting them to the US, much of the exported manufacturing is done by US companies who have offshored their manufacturing plants to China - once again the US/Renminbi rate has little bearing here as everything is basically denominated in US$. Which means that even if the peg is removed the US$/Renminbi exchange rate is unlikely to change as much as simple trade surplus based economics suggests it will, more likely is that the Chinese central bank will no longer need to buy huge amounts of T-bills to maintain the peg and this is likely to cause more pain than gain for the US economy and US$ - Walmart will still be able to sell cheap Chinese made stuff, there will still be a huge wage disparity between the US and China, but interest rates in the US will surge as the foreign debt is no longer underpinned by huge foreign purchases of T-bills
I've noticed that some of my users get over 100 copies of the same spam from the same IP in the space of 45 to 60 minutes. Normally pharmacy or porn spam from compromised dial-ups and all with the same structure and URLs so its the same spammers doing it again and again.
This started about 2 months ago and I didn't understand why and thought it may be broken spamware - but then it crossed my mind that this is most likely an attempt to force delivery to hosts which use greylisting. Unfortunatley greylisting doesn't take into account mailbombs and they'll get through if enough new connections are opened from the same IP, same sender to the same recipient for long enough.
Forced me hack my system to rate limit spam and auto blacklist the source IPs of this crap (at least it stops the 100s of duplicates of the original spam).
There was a discussion about auto update of both definitions and scan engines being a security risk some time ago on Full Disclosure (I think it started as a Windows Update thread). This event just goes to show that software which auto updates should be used with caution and controls are required if its going to be used on critical systems, ie any updates need to be tested prior to roll out. Whether or not this can be viewed as a security incident is debatable, but software which downloads updates that cause a DOS are usually viewed as malicious. I wonder about the cruft like Plaxo (and all that other supposedly safe stuff) which download updates all the time, I can't stop it (not for technical reasons ;) but I'm just waiting for the day an auto downloaded update craps out some VP's laptop.
anti-spyware utility manufacturers are still thinking whether to include it on their list
If you use the blackhole dns list of spyware domains from bleedingsnort.com its already included based on this submission from doxdesk. Squid ACLs are a great way to stop these parasites and you don't have to wait for anti-spyware manufacturers to decide whether its spyware or not. Also ClamAV lets you create your own signatures so you can setup rules to detect anything you consider to be spyware.
Here's a debunking of the 100 million year old hammer and ancient spark plug. Sheesh :)
Yeah me too and I'm not Canadian or American! 20 years ago I was with some friends who decided to do a beer run over the US border from Ontario with me in the pickup truck! I was pretty nervous but the border guards didn't even bat an eye - the only question was on the return journey when they were much more interested in whether we had too much beer than who was in the car.
(Asserting the phone or mail systems aren't relevant does not make it so. I'd be interested in proof)
The laws for services provided by common carriers are very different from those for private companies. Telcos are common carriers and they are not legally able to refuse service in the same way that private networks can. (Please take a look at the Telco act). The postal service is also governed by different laws than private companies, DHL can refuse to carry your package without explanation, whereas the postal service needs to have a legally valid reason per the postal laws.
And as I mentioned the Internet is comprised of private networks and thus is legally very different from the post and telephone - which is why it struck me that capt kangarooski's point about the landline and mail slot were unreasonable. I think the case of AGIS shows that other networks on the Internet do not have to interconnect to you or carry your traffic.
If you turned on a mailserver to accept incoming connections from the Internet at large and were then surprised you got a lot of mail you don't want then you have a fundamental misunderstanding of how the Internet works these days.
Obviously mail is completely broken and spammers and virus writers have clagged it. But this is not the point, we were talking about private networks and initially it was about spam being free speech and the right of spammers to send their junk onto other people's networks.
It seems that capt kangarooski has a bee in his bonnet over spam being free speech - no not the ponzi scheme promoting, pornography peddling, fake medicine prescribing, pirated software selling, get your penis extension here, junk - but that other good spam. Is advertising free speech?
Why is this post moded as insightful? How can anyone (even someone as obtuse as a lawyer who argues that spam is somehow free speech) in anyway compare phone lines and the postal service with the Internet and email?
Either you are a troll or completely ignorant of the law. I think the Telecommunications Act of 1996 should provide you with enough clues as to how clueless your telephone analogy actually is. And the postal service one doesn't even warrant a reply. These are endpoints of basically public utilities (or common carriers) and very different laws apply to them than to private networks.
The Internet is comprised of interconnected networks - the IP in TCP/IP stands for Internet Protocol and means that networks are interconnected together. Here's a newsflash for you, these networks are private and really, no matter what your opinion may be, they aren't open to anyone to use and/or abuse.