Stupid ‘Ph’ Neologisms Considered Harmful

Words: ‘Pharming’. I recently came across this line in a discussion document:

‘Wait, isn’t this exactly the kind of attack pharmers mount?’

I was under the impression that ‘pharming’ was a transgenics term: ‘In pharming, … genetically modified (transgenic) animals are
mostly used to make human proteins that have medicinal value. The protein encoded by the transgene is secreted into the animal’s milk, eggs or blood, and then collected and purified. Livestock such as cattle, sheep, goats, chickens, rabbits and pigs have already been modified in this way to produce several useful proteins and drugs.’

Obviously this wasn’t what was being referred to. So I got googling. It appears the sales and marketing community of various security/filtering/etc. companies, have been getting all het up about various phishing-related dangers.

The earliest article I could find was this — GCN: Is a new ID theft scam in the wings? (2005-01-14):

”Pharming is a next-generation phishing attack,’ said Scott Chasin, CTO of MX Logic. ‘Pharming is a malicious Web redirect,’ in which a person trying to reach a legitimate commercial site is sent to the phony site without his knowledge. ‘We don’t have any hard evidence that pharming is happening yet,’ Chasin said. ‘What we do know is that all the ingredients to make it happen are in place.’

Oooh scary! The article is short on technical detail (but long on scary), but I think he’s talking about DNS cache poisoning, whereby an attacker implants incorrect data in the victim’s DNS cache, to cause them to visit the wrong IP address when they resolve a name. This Wired article (2005-03-14) seems to confirm this.

But wait! Another meaning is offered by Green Armor Solutions, who use the term to talk about the Panix and Hushmail domain hijacks, where an attacker social-engineered domain transfers from their registrars. There’s no date on the page, but it appears to be post-March 2005.

Finally, yet another meaning is offered in this article at CSO Online: How Can We Stop Phishing and Pharming Scams? (May 2005): ‘The Computing Technology Industry Association has reported that pharming occurrences are up for the third straight year.’ What?! Call Scott Chasin!

Steady on — it appears that the ‘pharming’ CSO Online is talking about, has devolved to the stage where it’s simply a pop-up window that attempts to emulate a legit site’s input — no DNS trickery involved. (This trick has, indeed, been used in phish for years.)

So right there we have three different meanings for ‘pharming’, or four if you count the biotech one.

It may be impossible to get the marketeers to stop referring to ‘pharming’. But please, if you’re a techie, don’t use that term, it’s lack of clarity renders it useless. Anyway, the biotech people were there first, by several years…

Tags: , , , , , , , , , ,

Comments

CEAS Roundup

Spam: So, CEAS was great fun, and very educational:

  • Got to meet up with various antispammers, including Daniel and Theo from the SpamAssassin dev team, Jeff Chan from SURBL, Dan Kohn from Habeas, Catherine Hampton from The SpamBouncer, Miles Libbey, John Levine, Neil Schwartzman — lots of good chats.
  • MS really know how to feed a conference! I hear rumours there was an extra-special tinned-meat-product-based dish at the banquet…
  • But their firewalling tendencies put a serious damper on keeping in touch with the outside world, at least until we set up an SSH tunnel on port 443 ;)
  • During a lull, Dan Kohn fired off a hands-up census — a good 75% of the attendees (roughly) admitted to using SpamAssassin!

My highlight papers:

  • IBM’s Chung-Kwei pattern-discovery system — the one which Mark dug up. Very interesting stuff; it turns out that bioinformatics is full of large corpora of data (genomes) which you then need to find patterns in. Funnily enough, so is SpamAssassin: s/genomes/spam/, s/patterns/regular expressions/. The more advanced pattern-discovery algorithms even allow complex patterns to contain alternative blocks, ‘don’t-cares’ and similar regular-expression-like features.

    The really good bit of Chung-Kwei is the Teiresias algorithm (more pages, online demo). Of course, being IBM research, it’s probably patented to the hilt, and may be tricky to license; but it’s certainly pointed us in a whole new interesting direction — anyone know any bioinformaticians?

    IBM is really gearing up on anti-spam research. 4 of the 6 papers listed on their website were presented this year, at CEAS.

  • Another good paper was On Attacking Statistical Spam Filters, by Gregory L. Wittel and S. Felix Wu, which (similarly to Henry Stern’s submission, which I helped a little with) dealt with an attack on Bayesian filters.

    This is interesting stuff; we’re pretty sure it’s not as serious as it could possibly be, in SpamAssassin’s implementation, but it’s still a serious attack.

  • The Impact of Feature Selection on Signature-Driven Spam Detection was an interesting paper on AOL’s new signature schemes. (The conference was sponsored by Cloudmark, BTW, but those guys were nowhere to be seen — in which case they missed this presentation ;)
  • Reputation Network Analysis for Email Filtering was interesting, in that it mirrors to a degree the thinking behind web-o-trust.org, but in my opinion suffered due to a lack of thought about avoiding spoofing (by including IP address information in the FOAF file, it could do this now). However, once SPF becomes pervasive, this could be combined with that to generate personalised webs of trust usable for email whitelisting.
  • Resisting SPAM Delivery by TCP Damping was very nifty; plug a classifier into your MTA, and thereby detect connections from spam relays. Once you’ve found them, you then throttle down their connection as they attempt to deliver spam. Some other TCP-level tricks can do nifty stuff like massively increasing the bandwidth consumption of the spamming machines. Very very nice!

I took copious notes on the SpamAssassin wiki, if anyone’s curious.

Tags: , , , , , , , , ,

Comments

Hacking Netflix

Movies: Hacking Netflix, via torrez.

Jason Kottke points out a great quote on a Friendster cross-site scripting attack — this great quote: ‘We have a policy that we are not being hacked.’

He also speculates that Google used the GMail invite-network data for whitelisting — but whitelisting based on email address alone is trivially exploitable, so I’d doubt it.

I’m just back from a trip over to Cape Cod to meet family (halfway between here and Ireland, y’see ;) — lots and lots of luvverly lobster and sundry shellfish — and after a 6 day trip, had 5000 spams and a couple of thousand nonspam mails to deal with. Thankfully SpamAssassin dealt with the spams (only about 5 false negatives, no false positives I could spot) – but I’m going to have to do something about that volume of mail. drowning in the stuff. argh.

Tags: , , , , , , , , , ,

Comments

German neo-nazi UBE, and CAN-SPAM

Spam: Reg: German hate mail spam attack stuns experts: ‘Mailboxes in Germany and the Netherlands were flooded yesterday with spam containing German right-wing propaganda. Spammers used the Sober.G virus - a mass mailing worm that sends itself to email addresses harvested from infected computers - to spread their messages as widely as possible.’

The one good thing about this is that it might help some people realise that spam isn’t all about porn and commercial email; any kind of mail can be spam, including political speech.

However, this may be a bit late for the US, since CAN-SPAM explicitly does not regulate political spam. ah well, you live and learn, I suppose. ;)

Tags: , , , , , , , , ,

Comments

‘Internet advances not always pure tech’ shocker

Jason Kottke: Portal Wars II: When Search Engines Attack. He makes a great point (from Robert Morris at Etech 2002): while advances on the internet are typically heralded as tech-driven, in fact they’re more often usability-driven. Examples:

Mosaic was not an advancement in technology over TBL’s original browser. Blogger is a highly-specialized FTP client. IM is IRC++ (or IRC for Dummies, depending on your POV).

Dead right. Good tech, without the rough edges sanded down, and a degree of comprehensibility, is useless.

Aside: I wonder if Robert Morris, IBM is any relation to Robert T Morris, the 1988 internet worm guy?

Tags: , , , , , , , , ,

Comments

Spamming my HTTP referrer logs, pt. 2

I’ve been getting a very wierd attack on my sites recently, including this blog, the SpamAssassin websites, and http://jmason.org/ , whereby some luser is sending lots of requests, using made-up URLs in the referral field. Initially, I thought it was some kind of underpowered retaliation for SpamAssassin, but if that’s the case, they need to bone up a bit more on how these things work ;)

Alternatively, it could be an attempt to gain Googlejuice, by getting links from public referrer logs (my ones are).

Up ’til about a month ago, it was all porn sites. Recently, though, it’s been a selection of real domains that sound like they were put together by combining dictionary words or something.

All the attempts have come from IP address 216.127.68.58, owned by Everyone’s Internet, Inc. in Houston, TX:

216.127.68.58 - - [31/Mar/2003:00:01:53 +0100] “GET / HTTP/1.1″ 200 72143 “http://www.aircheckfactory.com” “User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)”

Here’s the domains in question:

  • AIRCHECKFACTORY.COM
  • ALTOTECHNOLOGY.COM
  • BAIDYANATHINDIA.COM
  • NXTCENTURY.COM
  • TIMEART.NET
  • WOTEVA.COM

Perhaps they’re recent lapsed domains which the spammer has picked up. Otherwise, what’s the connection between Baidyanath (a manufacturer of Ayurvedic products in India, thx Suresh) and ‘woteva’ (which sounds like ‘whatever’ in a UK english accent)?

I’ve whois’d them all, and they all seem to share two things: the name ‘Robert Woodley’ (or its initials), and the number (772) 594-2421. Area code 772 is – guess where — Florida. They should just cut to the chase and put ‘The Spammer State’ on their numberplates.

The pages on those sites are automatically-generated using what looks like USENET postings and google image search results, with a link to Commission Junction.

None of the names are in ROKSO, it seems. Do they ring a bell with anyone reading?

Date: Thu, 03 Apr 2003 13:20:06 -0800
From: (spam-protected) (Justin Mason)
Subject: whois details on referrer spam

Registrant:
Michael Lewisham
RW Internet
PO Box 4723
Grand Cayman,  8621
Cayman Islands
Registered through: ozwebsites 
Domain Name: AIRCHECKFACTORY.COM
Created on: 03-Jan-03
Expires on: 03-Jan-04
Last Updated on: 03-Jan-03
Administrative Contact:
Lewisham, Michael  (spam-protected)
RW Internet
PO Box 4562
Grand Cayman,  7238
Cayman Islands
(772) 594-2421      Fax -- 
Technical Contact:
Lewisham, Michael  (spam-protected)
RW Internet
PO Box 4562
Grand Cayman,  7238
Cayman Islands
(772) 594-2421      Fax -- 
Domain servers in listed order:
NS1.MYDOMAIN.COM
NS2.MYDOMAIN.COM
NS3.MYDOMAIN.COM
NS4.MYDOMAIN.COM
Registrant:
Michael Lewisham
RW Internet
PO Box 4723
Grand Cayman,  8621
Cayman Islands
Registered through: ozwebsites 
Domain Name: ALTOTECHNOLOGY.COM
Created on: 29-Dec-02
Expires on: 29-Dec-03
Last Updated on: 29-Dec-02
Administrative Contact:
Lewisham, Michael  (spam-protected)
RW Internet
PO Box 4562
Grand Cayman,  7238
Cayman Islands
(772) 594-2421      Fax -- 
Technical Contact:
Lewisham, Michael  (spam-protected)
RW Internet
PO Box 4562
Grand Cayman,  7238
Cayman Islands
(772) 594-2421      Fax -- 
Domain servers in listed order:
NS1.MYDOMAIN.COM
NS2.MYDOMAIN.COM
NS3.MYDOMAIN.COM
NS4.MYDOMAIN.COM
Registrant:
Robert Woodley
Robert Woodley Internet
PO Box 401
Grand Cayman,  7651
Cayman Islands
Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: BAIDYANATHINDIA.COM
Created on: 09-Jan-03
Expires on: 09-Jan-04
Last Updated on: 09-Jan-03
Administrative Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4634
Suite 205
Port Vila,  8621
Vanuatu
(772) 594-2421      Fax -- (772) 594-2421
Technical Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4634
Port Vila,  8621
Vanuatu
(772) 594-2421      Fax -- (772) 594-2421
Domain servers in listed order:
NS1.MYDOMAIN.COM
NS2.MYDOMAIN.COM
NS3.MYDOMAIN.COM
NS4.MYDOMAIN.COM
Registrant:
Wanker Engineering
PO Box 9816
Auckland,  3522
New Zealand
Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: NXTCENTURY.COM
Created on: 21-Mar-01
Expires on: 21-Mar-04
Last Updated on: 21-Mar-03
Administrative Contact:
Engineering, Wanker  (spam-protected)
Wanker Engineering
PO Box 9816
Auckland,  3522
New Zealand
3530912167      Fax -- 
Technical Contact:
Engineering, Wanker  (spam-protected)
Wanker Engineering
PO Box 9816
Auckland,  3522
New Zealand
3530912167      Fax -- 
Domain servers in listed order:
NS1.LYNXWEBHOSTING.COM
NS2.LYNXWEBHOSTING.COM
Registrant:
Robert Woodley
Robert Woodley Internet
PO Box 4634
Port Vila,  8621
Vanuatu
Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: TIMEART.NET
Created on: 16-Mar-01
Expires on: 16-Mar-04
Last Updated on: 16-Mar-03
Administrative Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4634
Suite 205
Port Vila,  8621
Vanuatu
(772) 594-2421      Fax -- (772) 594-2421
Technical Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4634
Port Vila,  8621
Vanuatu
(772) 594-2421      Fax -- (772) 594-2421
Domain servers in listed order:
NS1.MYDOMAIN.COM
NS2.MYDOMAIN.COM
NS3.MYDOMAIN.COM
NS4.MYDOMAIN.COM
Registrant:
Robert Woodley
PO Box 4573
Grand Cayman,  871251
Cayman Islands
Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: WOTEVA.COM
Created on: 16-Mar-00
Expires on: 16-Mar-04
Last Updated on: 16-Mar-03
Administrative Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4573
Grand Cayman,  87125
Cayman Islands
(772) 594-2421      Fax -- (772) 594-2421
Technical Contact:
Woodley, Robert  (spam-protected)
Robert Woodley Internet
PO Box 4753
Suite 205
Grand Cayman,  87125
Cayman Islands
(772) 594-2421      Fax -- (772) 594-2421
Domain servers in listed order:
NS1.MYDOMAIN.COM
NS2.MYDOMAIN.COM
NS3.MYDOMAIN.COM
NS4.MYDOMAIN.COM

Tags: , , , , , , , , ,

Comments

Jhai Foundation notes bus attack in Laos

The latest Jhai Foundation newsletter notes an attack on a bus in Laos:

Some of you may have heard about a ‘terrorist attack’ in Laos yesterday. The reports are true. Eight People on a bus and two people on motorcycles were killed after a robbery. Two of them were internationals. Their identities and nationalities have not yet been confirmed. The attackers are thought to be Lao citizens, probably Hmong, possibly still caught up in the war that ended 28 years ago here. This will not be confirmed until they are caught.

This incident took place more than 30 km North of Vang Vieng or about 100 km North of our launch site. This is a sad day in Laos.

Whoa, I think I was on that bus a year ago! As I recall, that area of Laos is still noted for occasional bandit attacks…

Date: 07 Feb 2003 22:29:44 +1100
From: (spam-protected)
To: (spam-protected)
Subject: Jhai Foundation Remote Villages Network Update, Security Issues, New FAQs, Press Visas

<

table width=”75%” border=”0″ cellpadding=”5″ align=”center”>

Jhai

Foundation Remote Villages Network.

An

update from Lee,
New FAQ’s,
Security Issues and

If You Need a Press Visa

<

p>

Contacts:


<

p> Jesse Thorn 1 415 225 1665,

Earl Mardle 612 9787 4527,

Enthusiastic "Ground Level"

support team.

Jhai’s

From

Lee Thorn in Laos

Dear friends,

We are on

track and we will launch on 13 February. Lee Felsenstein arrived last

night and is whipping us into shape in his gentle, nerdish way. Ed Gaible

arrived with him and is now up a tree on a mountain above the village

of Phon Kham. All of us - about 40 people between the village and our

staff and volunteers - are working hard and our spirits are high.

A

Sad Day For Laos

Some

of you may have heard about a ‘terrorist attack’ in Laos yesterday. The

reports are true. Eight People on a bus and two people on motorcycles

were killed after a robbery. Two of them were internationals. Their identities

and nationalities have not yet been confirmed. The attackers are thought

to be Lao citizens, probably Hmong, possibly still caught up in the war

that ended 28 years ago here. This will not be confirmed until they are

caught.

This incident

took place more than 30 km North of Vang Vieng or about 100 km North of

our launch site. This is a sad day in Laos.

Security

Arrangements For The Launch

As I write, Vorasone Dengkayaphichith, our great country coordinator,

is meeting with officials in Hin Heup District and Vientiane Province

to make final arrangements for security for all people at our launch and

party on 13 February. Vor and I know many, many children in the village

of Phon Kham and the other villages and Bounthanh has nieces and nephews,

and sisters and brothers and her parents there, too. Those children will

be safe - and, I believe, we will be safe, too.

Our remote

village project is a sophisticated, appropriate high tech endeavor designed

by Lee Felsenstein and his excellent team specifically for the needs as

expressed by the villagers who are getting the system.

And this

project rests in Jhai Foundation, … which is a reconciliation organization

which, now, has worked for over five years in Laos, and nearly three,

now, on state-of-the-art IT projects. Jhai Foundation is we people in

it and our relationships - and there are hundreds of us doing something

every day - and we are located all over the world.

Reconciliation,

like peace - and like development - is the opposite of war. Reconciliation

is the process of recognizing our connection - something that always was

and always will be, something very, very valuable. Jhai - in Lao - means

the spirit and energy of connection, as well as hearts and minds working

together … and many other similar things. It is neutral. It is up to

us how we act, how we respect.

War and peace

are matters of choice. Sometimes we choose to close down and kill. For

this - I know and most Lao people know - you pay until you die. The price

is unbelievably huge. Other times we choose to open up and connect. For

this - thanks to Lao people who teach me about this daily by the way the

are and act - I know you get the chance for joy, the chance to recognize

others as just plain people … and the chance to know and like yourself.

The choice, it seems, is easy. What shall we take?

In an age

of terrorism - which breeds fear like a virus - it is best to connect.

We choose to connect, to move forward, to do what we can do - with you

  • to help some poor folks who are friends of ours connect with one another and when they want to, with us. The benefit, we hope, is unbelievably huge.
  • Come to our launch. We will dazzle you with fun!

    Join us,

    Lee Thorn chair, Jhai Foundation

    PS Please do not hesitate to consult our FAQ or to email Jesse Thorn, . If you need to talk with one of us in Laos, that can be arranged.

    New FAQ’s

    What Were The Greatest Problems To Create The Technical Solution?
    From Jhai’s perspective it has been funding and localization. We have done this on a very small budget - lower five digits in US dollars - with the help of many engineers and other technical people. The technical lead was taken by renown computer designer Lee Felsenstein.

    A team of over 20 people donated their time. This time is worth, we estimate, perhaps $0.5 million. Localization has not been easy. For example, the team had to create new Unicode mappings for existing fonts. The relation of English to Lao is anything but direct.

    Which Impact Will The Internet Access Probably Have On The Villagers?
    They believe it will give them the opportunity to have a closer relationship with their extended families and to get better prices for their products at market. It is like a road for them.

    Is A Prototype Already Working?
    We have tested all components. The Jhai PC works. We are now completing the ‘marriage’ of the software and the hardware.

    Do You Think The Jhai PC Will Help Bring Access To Remote Sites In Other Countries As Well?
    The answer is ‘yes’. We have had inquiries from 40 countries and we expect observers from about several major development funding agencies to see our launch in the village of Phon Kham on 13 February.

    We designed specifically in terms of the expressed needs of people in five villages that have no electricity, no phones or hope of cell phone connectivity, and no good roads in the rainy season. I learned years ago from the Independent Living Movement of People with Disabilities that when people design for the folks with the most challenges, the tool works for many people equally or less challenged. I suspect this principle works with the Jhai Computer and Communications System.

    How Important Is The Way Jhai Works?
    I suspect that our development efforts - using the reconciliation model we have developed based on relationships between people on opposite sides of a devastating war, also will have wide application. Jhai Foundation and the villagers of Phon Kham have gotten to know each other over five years. Each of us brings our whole selves and our whole experience to the table. We all are through with war. It is amazing what happens when people are willing to stay in the room and communicate - no matter how hard it is.

    Many technology projects fail because the application becomes focused on the technology first; that often doesn’t work. Jhai’s model focuses on people and communication, the need for the technology grows out of that. We get to the technology through communication, not the other way round.

    Press Visa Requirements
    If you plan on coming to the launch and you are press, please make arrangements for a press visa and minder immediately. Jhai may be able to help if you follow these steps:

    1. Send the following Information to
    2. Email Subject Line:
      PLEASE RUN PRESS VISA PERMISSION
    3. In the email we need the following information:
      • Full
        • name as it appears on the person’s passport
      • Country of the passport
      • Passport Number
      • Date of Arrival in Laos
      • Date of Departure from Laos
    4. Explicit detailed list of any equipment (taperecorders, cameras, etc.) you are bringing.
      Including BRAND NAME and MODEL #.
    5. Complete Laotian itinerary in detail. For example,
      • 10 February
      • Arrive Vientiane
  • 11 and 12 February - Travel to Phon Hong, Vientiane Province
  • 13 and 14 February - Travel to Phon Kham, Vientiane Province 13 Feb.
  • 15 February Depart Vientiane

Tags: , , , , , , , , ,

Comments

The good news

Frequent drinking cuts heart attack risk (New Scientist). ‘ Half an alcoholic drink every other day, be it wine, whisky or beer, can reduce the risk of heart attacks by a third, a new study shows. The 12-year study published in The New England Journal of Medicine found that the frequency of drinking was the key to lowering the risk of heart disease, rather than the amount, the type of alcohol, or whether or not it was drunk with food.’

Tags: , , , , , , , , ,

Comments (1)

The mother of all package tours

The mother of all package tours: With the world expecting an attack on Iraq any time now, no one in their right mind would take a holiday there - would they? You’d be suprised, says Johann Hari (Guardian).

A fascinating article, from so many angles — First, the tourists:

I met Julie and Phil. They seemed an almost comically suburban couple: polite, a little posh, all golf jumpers and floral smocks. But then Phil mentioned that his last holiday had been to North Korea. “Yeah, I’ve been twice since they opened the borders to tourists. I’m a bit of a celebrity there now. People come up to me in the streets and say, ‘Why have you come to our country twice?’.” …

Then there was Hannah. How to explain her? A frightfully well-spoken Englishwoman in her early 50s. When we first met, she dispensed with the small talk to say: “I think Saddam is a great man and the USA is a great big global bully. My theory is that he should be given Kuwait. It’s perfectly logical if you look at the map.” “I think he’s rather handsome too,” she went on. “Every woman does really. I’d rather like to inspect his weapon of mass destruction myself.”

And the politics:

Talking politics in Iraq is like a magic-eye picture, where you have to let your brain go out of focus, not your eyes. One very distinguished old man in a Mosul souk welcomed me warmly and told me how much he had loved visiting London in the 1970s. After much oblique prodding, he said warmly, “I admire British democracy and freedom.” He held my gaze. “I very much admire them.”

… As we wandered around, looking at the grim exhibits, one of the soldiers on duty guarding the museum told me that three of his brothers died in that war. Everybody in the country lost somebody - yet it is almost impossible to get anybody to talk about it. They speak in a small number of bloodless stock-phrases.

After more than 10 such encounters, it suddenly hit me that the people of Iraq are not even allowed to grieve their huge numbers of dead in their own way. They are permitted only a regulation measure of state-approved grief, which must be expressed in Saddam’s language: that of martyrdom and heroism, rather than wailing agony about the futility of a war which slaughtered more than a million people yet left the borders unchanged and achieved nothing.

Thanks to Ben Walsh for the forwardy goodness.

Tags: , , , , , , , , ,

Comments

So like, a third of the rootservers went down and we didn’t even notice. (fwd)

wow, seven to nine of the thirteen DNS root servers were flood-attacked on Monday, and nobody noticed. That’s cool.

… experts said the attack, which started about 4:45 p.m. EDT Monday, transmitted data to each targeted root server 30 to 40 times normal amounts. One said that just one additional failure would have disrupted e-mails and Web browsing across parts of the Internet.

Date: Tue, 22 Oct 2002 19:59:06 -0400
From: (spam-protected)
To: (spam-protected)
Subject: So like, a third of the rootservers went down and we didn’t even notice.

Yea, I certainly didn’t notice. Its cool and scary really — Cool that the whole net didn’t cease to be (even for an hour) and bad that 9 rootservers died period.

Scary mofo shit.

http://www.sfgate.com/cgi-bin/article.cgi?file=/news/archive/2002/10/22/national1907EDT0772.DTL

Powerful attack cripples majority of key Internet computers

TED BRIDIS, Associated Press Writer

Tuesday, October 22, 2002

(10-22) 16:07 PDT WASHINGTON (AP) —

An unusually powerful electronic attack briefly crippled nine of the 13 computer servers that manage global Internet traffic this week, officials disclosed Tuesday. But most Internet users didn’t notice because the attack only lasted one hour.

The FBI and White House were investigating. One official described the attack Monday as the most sophisticated and large-scale assault against these crucial computers in the history of the Internet. The origin of the attack was not known.

Seven of the 13 servers failed to respond to legitimate network traffic and two others failed intermittently during the attack, officials confirmed.

The FBI’s National Infrastructure Protection Center was “aware of the denial of service attack and is addressing this matter,” spokesman Steven Berry said.

Service was restored after experts enacted defensive measures and the attack suddenly stopped.

The 13 computers are spread geographically across the globe as precaution against physical disasters and operated by U.S. government agencies, universities, corporations and private organizations.

“As best we can tell, no user noticed and the attack was dealt with and life goes on,” said Louis Touton, vice president for the Internet Corporation for Assigned Names and Numbers, the Internet’s key governing body.

Brian O’Shaughnessy, a spokesman for VeriSign Inc., which operates two of the 13 computers in northern Virginia, said “these sorts of attacks will happen.”

“We were prepared, we responded quickly,” O’Shaughnessy said. “We proactively cooperated with our fellow root server operators and the appropriate authorities.”

Computer experts who manage some of the affected computers, speaking on condition of anonymity, said they were cooperating with the White House through its Office of Homeland Security and the President’s Critical Infrastructure Protection Board.

Richard Clarke, President Bush’s top cyber-security adviser and head of the protection board, has warned for months that an attack against the Internet’s 13 so- called root server computers could be dramatically disruptive.

These experts said the attack, which started about 4:45 p.m. EDT Monday, transmitted data to each targeted root server 30 to 40 times normal amounts. One said that just one additional failure would have disrupted e-mails and Web browsing across parts of the Internet.

Monday’s attack wasn’t more disruptive because many Internet providers and large corporations and organizations routinely store, or “cache,” popular Web directory information for better performance.

“The Internet was designed to be able to take outages, but when you take the root servers out, you don’t know how long you can work without them,” said Alan Paller, director of research at the SANS Institute, a security organization based in Bethesda, Md.

Although the Internet theoretically can operate with only a single root server, its performance would slow if more than four root servers failed for any appreciable length of time.

In August 2000, four of the 13 root servers failed for a brief period because of a technical glitch.

A more serious problem involving root servers occurred in July 1997 after experts transferred a garbled directory list to seven root servers and failed to correct the problem for four hours. Traffic on much of the Internet ground to a halt.

– Best regards,

bitbitch                          (spam-protected)

Tags: , , , , , , , , ,

Comments

comments on Star Wars Episode II

David Brin gets all anti-fannish about Star Wars Episode 2: Attack of the Clones. I really don’t know why he bothers, it and Episode 1 were atrocious, George Lucas has lost it, full stop, IMO. But I did like the way Brin refers to Yoda as “one green preachy oven mitt”; I’d just append “with the voice of Fozzie Bear”.

And who are the critics who’ve never seen a Maori before? “bounty hunter Jango Fett even looks Latino” my arse.

Tags: , , , , , , , , ,

Comments

(Untitled)

The Evil Gerald strikes again, with Mystery Arab warns commuter of possible attack:

We both got off the train at Shankill, and he took me aside in a mysterious fashion. Then he told me in a very hushed voice, “I probably shouldn’t be telling you this, but you’ve been so kind to me. I’ve had this briefcase for three years and I’ve never been able to open it. The sandwiches my wife made for me in 1998 have gone off, but that’s not the point. I’m going to give you a warning, but you must promise to not tell anyone unless you don’t want them to die, in which case it’s fine, I’ll understand that. Listen: Don’t eat so many fatty foods. You’ll clog up your arteries and run a greater risk of suffering a fatal heart attack later in life. It’s only common sense.”

Tags: , , , , , , , , ,

Comments

(Untitled)

When Leonids attack!

Just as Laura walked toward the house to get her husband, Tom, a chunk of rock fell from the sky, slamming down to her left near where she had been standing just moments before.

via the forteana list.

Date: Wed, 21 Nov 2001 10:24:43 -0000
From: Scott Wood (spam-protected)
To: Forteana (spam-protected) Fort Research List (spam-protected)
Subject: When Leonid’s Attack!

A memento from the sky

Family nearly hit by possible meteorite from Leonid display

BY LU ANN FRANKLIN Times Correspondent

Posted Tuesday, November 20, 2001

http://www.thetimesonline.com/index.pl/article?id=1192720

HIGHLAND — When Laura Yuran and her 11-year-old son, Jonathon, awoke at 4 a.m. Sunday to watch the Leonid meteor shower outside the family’s home in Highland, they never expected to be a target for space debris.

About a half hour into their sky gazing mother and son began hearing something that sounded like hail falling. A short time later, those hail-like objects started pelting the pair. Just as Laura walked toward the house to get her husband, Tom, a chunk of rock fell from the sky, slamming down to her left near where she had been standing just moments before.

“It went, ‘Boom!’ and I screamed,” Laura recalled. “Part of it hit the driveway and the second part was embedded in the ground. I was afraid to touch it.”

Laura’s scream brought Tom outside. Locating the rocks with a flashlight, he picked them up, finding them cold to the touch. He had to pull the smaller stone out of the lawn.

“It’s beautiful,” Laura said of the family’s newest treasure.

Jim Seevers, an astronomer from Chicago’s Adler Planetarium, said the rocks are most likely meterorites from the Leonid meteor shower. The rust color is “the fusion crust,” he said, which is typical of a meteorite that has been seared by the earth’s atmosphere.

“The rock probably chipped off and the shiny, silver they see is the inside,” Seevers said. “It’s most likely iron and nickel.”

Although Tom Yuran was concerned that the rocks might be radioactive, Seever said they are basically rocks mixed with metal, such as bits of iron. The rarest of all meteorites are composed of carbon, another common element in the universe, and “look like a hunk of charcoal,” Seevers said.

The astronomer said meterorites are slowed down by the earth’s atmosphere much like a parachute slows down a skydiver. At 60 miles up in the atmosphere, the rock then begins a fall to earth. Its size and the speed it is traveling will determine how hard it hits and if it will become embedded in the Earth.

“If it had hit me, I could have been killed,” Laura Yuran said. “We hid under the awning on our porch because we were afraid of more rocks falling down.”

Seevers recommended that the Yurans allow the geology staff at Chicago’s Field Museum of Natural History to analyze the rock.

“We don’t have a lab here at the Adler Planetarium,” he said. “The staff at the museum’s meteorite lab will be able to tell them the rock’s composition.”

On Monday afternoon, the Yurans contacted Dr. Menache Wadhwa, the curator of the Field Museum’s meteorite collection, for an opinion.

“She wants us to bring her a small piece of it on Wednesday morning. She said we’re the only ones anywhere who have reported falling meteorites from the Leonid meteor shower,” Tom said.

In fact, after talking with Wadhwa, Jonathon began searching for more pieces of the meteorite. He quickly located two more small rocks that weigh about one ounce each.

Laura said until the rocks are analyzed, she’s trying to play hostess to the excited neighborhood children whom Jonathon has invited over to see the space debris. Eventually she hopes to put the objects in a display case and give it to her son who collects rocks.

The next time the Yuran family could gather to view the Leonid meteor shower is in 2034. That’s when the comet Temple-Tuttle, which causes the Leonid display, will pass by Earth again.

“We really enjoyed watching it, with the blue lights and long tails,” Laura said. “If it wasn’t for Jonathon setting his alarm and waking us up, we wouldn’t have seen it.”

Tags: , , , , , , , , ,

Comments

(Untitled)

Nightmarish details of what the US planned to do as a first strike, in the event of nuclear escalation in the cold war. Mutual assured destruction is the only valid term, IMO.

Date: Fri, 28 Sep 2001 12:11:50 +1000
From: Justin Mason (spam-protected)
To: (spam-protected)
Subject: US nuclear attack plans of the cold war (fwd)

— Jay Lake forwarded:


> In 1955, Gen. Curtis LeMay, the head of SAC, told the Joint Chiefs his
> nuclear attack plans for the first time: “The plan called for the
> instantaneous destruction of 645 military targets, 118 cities and sixty
> million people in the Soviet Union.” Note that since 1957 at the
> *latest*, and contrary to public statements by Presidents of the time
> and since, the commander of SAC has had the ability to initiate a
> nuclear attack, without orders from the President.


> “[....] In 1958, the military sought and received more classified funds
> to build more nuclear reactors, to make more plutonium, to triple the
> number of warheads within a year.” When Eisenhower learned of this in
> 1959, he summed up the military’s position this way: “They are trying to
> get themselves in an incredible position–of having enough to destroy
> every conceivable target in the world, plus a threefold reserve.”
>
> It wasn’t until late November 1960 that the then head of SAC, General
> Power, showed the President it’s plans for nuclear war. “The plan began
> World War III with a devastating first strike. Three thousand two
> hundred and sixty-seven nuclear warheads annihilated the Soviet Union,
> China and Eastern Europe in a single blinding blow. And the first strike
> was just that: the beginning. SAC planned to follow this apocalyptic
> spasm with thousands and thousands more bombs, everything we had on
> hand. Ten nations would be obliterated. Five hundred million people
> would die.
>
> “The plan accurately reflected General Power’s thinking. “The whole
> idea is to *kill* the bastards!” Power said in December 1960. “At the
> end of the war, if there are two Americans and one Russian, we win!””

Tags: , , , , , , , , ,

Comments

(Untitled)

I’ve been very quiet about the attack on the World Trade Center; this is not from any unwillingness to talk about it, it’s more because, for the last week, I’ve been doing virtually nothing else, in a range of forums, particularly on Crackmice and the TBTF Irregulars list. What can I say — I guess I’m just not a committed blogger ;)

Anyway, I’ve been forwarding on lots of details on Afghanistan, Pakistan, and Osama Bin Laden’s Al-Qaeda organisation, which generally makes it look like the US and its allies will have their work cut out for them. Here’s a good one from The Guardian (UK):

Communications are vital. Messages are sent by word of mouth to Pakistan, and from there they are emailed. Bin Laden, testimony has shown, had no contact with any of the east African bombers except for al’Owhali, whom he met, once, 18 months before the attack. Instead the men were selected, briefed and supervised by senior aides, some from organisations affiliated with but discrete from bin Laden’s. And this is the key: al-Qaeda does not act as a commander, it acts as a facilitator, a coordinator, putting together disparate elements - some in Afghanistan, some in the target country, some in other locations entirely - who together can pull off an operation.

It’s going to be messy. And as a much-forwarded piece by Tamim Ansary points out,

We come now to the question of bombing Afghanistan back to the Stone Age. Trouble is, that’s been done. The Soviets took care of it already. Make the Afghans suffer? They’re already suffering. Level their houses? Done. Turn their schools into piles of rubble? Done. Eradicate their hospitals? Done. Destroy their infrastructure? Cut them off from medicine and health care? Too late. Someone already did all that.

There’s lots more good, insightful journalism in the Guardian’s special report on Afghanistan and special report on the WTC attacks. Recommended reading.

Tags: , , , , , , , , ,

Comments

(Untitled)

Signature FoRK Debate Moves — a list of cut-out-and-keep debating tactics for mailing lists, featuring such tried-and-trusted feints and lunges as the Old Post Resurrection Embarrassment, The Link Slam (my favourite), and the truly beautiful to behold Tom Whore.

Date: Sat, 02 Jun 2001 04:06:49 -0500
From: Jeff Bone (spam-protected)
To: (spam-protected)
Subject: Signature FoRK Debate Moves

(In memory of CobraBoy… Humor Ark Ark?)

So much as I hate to say it, FoRK is pretty analogous to the WWF in many ways. As such, it too has its signature moves. In deconstructing the recent rambles and pondering the Debate-O-Matic ideas that have been tossed about, it occurred to me that it might be worthwhile to document some of those signature moves. Here’s a rough cut. (Before anybody starts yelling, let me acknowledge that I indulge in almost all if not every one of these myself on a regular basis. This isn’t (hypo)criticism, it’s reflection.)

The Character Assassination

The Character Assassination is a classic maneuver with a fairly self-explanatory name. Rather than attacking the point of argument itself, the attacker seeks to undermine the defendant his/herself. This is done in a variety of ways, yielding variations that are each themselves worthy of study. The general character assassination attack can take two modes: direct and indirect. In the direct attack, the attacker draws directly from the surrounding debate context in order to build material — relevant or not — which is positioned to undermine the defendant’s credibility, and therefore weaken their position. In the indirect attack, the attacker uses context outside of the debate itself to executive the move.

The Stereotype Assassination

The Stereotype Assassination is a variation on the Character Assassination. In it, the attacker seeks to draw parallels — real or otherwise — between the defendant’s position and a tendency to unthinkingly buy into stereotypes. Because we all “know” that stereotypes are over generalizations, narrow-minded, and generally “wrong” the attacker is able to undermine the defendant’s credibility and therefore their position without addressing specific issues at all. The stereotype maneuver is ironic in nature; the attacker is usually utilizing unfounded generalization from the defendant’s actual argument in order to paint the defendant as engaging in stereotyped thinking.

The Category Assassination

The Category Assassination is in many respects the ironic complement of the Stereotype Assassination. In this move, the attacker builds the perception in the audience’s mind that the defendant belongs to some particular category, and then makes the assertion that the category in question has some particular stereotyped mindset / behavior / what have you; by having such behavior, the attacker asserts, the defendant cannot possibly have a position of merit -wrt- the current debate.

The Context Stomp

The Context Stomp is a cheap but effective maneuver. In it, the attacker intentionally misrepresents something the defendant asserted, taking a particular point out of context and flaying the hell out of it. Doing so may or may not detract from the defendant’s position, but it certainly distracts. The defendant is put on the defensive, and must clean up the situation before proceeding to prosecute his or her point.

The Level Lunge

The Level Lunge is another distraction maneuver. The attacker seeks to gain points by plummeting down the metalevel ladder; first, the meta-argument is attacked, and then the meta-meta-argument, and so on. This is a good maneuver to engage when the attacker is on the outs, losing the fight, as it can force a stalemate. (A successful Level Lunge resulting in a stalemate is referred to a Stack Overflow Termination.)

The Slight-Of-Hand Strawman

In the Slight-Of-Hand Strawman, the attacker directly engages the defendant’s arguments, but during the process subtly shifts the point. After doing this long enough, the attacker has constructed a weak strawman which is quickly knocked down for the kill. The SOHS is widely regarded as a cheap maneuver not worthy of FoRK. In past lives though not on FoRK, Gojomo has been known to be a skillful master of this maneuver.

The Zecious Zero

In the Zecious Zero, the attacker tediously constructs an apparently logical framework, states that it is formally correct and any disagreement must therefore be merely a definitional / semantic matter, and vigorously defends the formal framework. It should be noted that in most cases the framework constructed is “zecious” in the extreme; while having the appearance of a very detailed formal framework, it is usually internally inconsistent. Only the complexity of the framework hides the inconsistency. (Kudos to Gordon Mohr for coining the term “zecious.”)

The Extrapolation Explosion

The Extrapolation Explosion is a combo Context Stomp / SOHS special. In it, the attacker puts together multiple iterative context stomps and SOHSes in one post, extrapolating from the current debate, until the defendant’s argument is so grossly distorted that it cannot maintain its integrity. This move is extremely hard to defend against; in this regard, it resembles the Level Lunge in that attempting to counter usually results in Stack Overflow Termination.

The Insinuendo

The Insinuendo is not an attack per se, rather a feint. It is a mild and subtle CA move which is not intended to score but rather to disorient the defendant and plant the seeds of doubt in the minds of the audience. When executed correctly, it can be very effective; however, FoRK isn’t a particularly subtle place, so we don’t even see this one attempted very often.

The Jane-You-Ignorant-Slut

The JYIS is an Insinuendo without the subtlety. It is almost entirely ineffective in either disorienting the defendant or in seeding doubt among the audience, but it does have one beneficial effect. When executed well, it demonstrates the attacker’s superb sense of humor and comedic timing, and therefore scores points *for* the attacker without actually taking them away from the defendant. FoRK tends to see JYIS at the tail end of threads collapsing into rhetorical holes, which is unfortunate; it’s a beautiful maneuver, but worthless in such a situation.

The Mortar Lob

The Mortar Lob is the Hail Mary of our moves. It involves drastically changing the topic mid-thread, making an extreme shift towards some position entirely unrelated, and firing away. It is usually a last ditch effort employed as a defensive conversion maneuver when one is on the way out. The Mortar Lob almost never works, but if you don’t try it, you’re a pussy.

The Loaded Word Gambit

In this move, the attacker loads the argument up with words which carry significant emotional baggage and implication. By appealing to the knee-jerk interpretations of these words, the attacker seeks to gain the advantage. The Loaded Word Gambit is almost never effective, and often results in the Semantic-Spiral-Of-Death.

The Semantic Death Spiral

This maneuver is often used in either of two contexts. It is often engaged when both positions are rhetorically strong, or when the rhetorical frameworks employed cannot be meshed at all. It’s an endless recursion of definitional arguments, with each combatant seeking to co-opt the other’s argument by defining away any disagreement. The Faith Thread is a good recent example of a tag team SDS bout.

The Curse and Recurse

The Curse and Recurse is a disorienting attack in which the attacker gets all wiggy to throw the defendant off, pops the stack, then circles back around to resume the same attack sequence that didn’t work the first time around. This can go on forever unless it falls into some terminal sequence.

The Old Post Resurrection Embarrassment

In this attack, the attacker diligently — perhaps through a significant act of e-mail archaeology — seeks to undermine the opponent’s position. This attack can take a variety of forms. It is often used to illustrate some (potentially irrelevant) inconsistency between the defendant’s current position and some position adopted in a previous bout. It can also be used, as by Greg Bolcer recently, to illustrate the fundamental incorrectness of the defendant’s position by referring to a previous post made by somebody else. When deployed as the latter, this move is also known as The FoRK Historical Stupidity Attack. There is no effective defense against the Old Post Resurrection Nightmare, though the defendant may sometimes attempt the Teflon Don in retaliation.

The Drunken Master

The Drunken Master is a move intended to completely imbalance the attacker. It is often employed after a brief hiatus during which the attacker engages in some late night substance abuse; the attacker then blathers at top volume until the defendant is totally unbalanced, at which point the attacker attempts to close in for the kill. (And usually falls on his/her face in the process.) The Drunken Master always feels good at the time, but is usually regretted the next day.

The Pedantic Nightmare

The Pedantic Nightmare is the complement of the Semantic Death Spiral. In it, the argument is focused on its formal structure, without regard to semantics. The attacker seeks to use endlessly tedious formal reasoning in order to illustrate the inconsistency of the defendant. It is usually ineffective both through the attacker’s failure to prosecute it properly and the defendant’s unwillingness to let it happen.

The Dennis Miller

Also known as The Reference Roundhouse. In this move, the attacker attempts to co-opt credibility by dazzling the defendant and the audience with a barrage of not particularly relevant references, preferably obscure, usually nonauthoritative. The theory is that if the attacker has such a vast array of trivial knowledge at their disposal, surely they are therefore correct in their assertions. (I know, it doesn’t make sense, but that doesn’t stop us from trying it from time to time.) The Dennis Miller is often coupled with the Teflon Don when things go awry, which is pretty funny when you think about it. The Dennis Miller can be effective in the right context, and is almost always fun to watch.

The Vocab Blitz

The Vocab Blitz is another credibility co-opt maneuver intended to add punch to a particular attack. The Vocab Blitz involves maximizing the syllabic length of any and every possible word in a particular parry in order to demonstrate the attacker’s intelligence. Clearly, such a genius much be infallible. (Or so the thinking goes.) The Vocab Blitz is cheap and meaningless.

The Link Slam

The Link Slam is an attempt to shore up an attack by over reference. The theory is that clearly the attacker has researched the issue much more thoroughly than the defendant. Whether this is believed or not, this can be effective; it often sends the defendant on a fact chase, therefore distracting them enough for the attacker to make a finishing move.

The Psuedofact Slam

The Psuedofact Slam is like the Link Slam, but without the links. In this move, the attacker shores up their position with a seemingly limitless array of very specific sounding and potentially believable supporting “facts.” These “facts” need not and often do not have any factual basis whatsoever; the attacker need not even do a Google beforehand, as no attribution or support is provided. Only a diligent defender can effectively parry a Psuedofact Slam.

The SYGIGH

Also known as The Cartman, the Screw-You-Guys-Im-Going-Home is a defensive measure of last resort, effectively ending the bout without a victory condition. Pretty clear from its name what it consists of, the SYGIGH was most recently effectively employed by our own Strata in a debate with Yours Truly. The SYGIGH almost always results in a rematch, once the party who employs it decides a rematch is needed.

The False-Falling-On-Ones-Sword

This maneuver consists of the attacker feigning a conciliatory or self deprecating position, in an attempt to draw the attacker in and put them off guard. It is usually immediately followed up by some combo of the Slams, or even — particularly effectively — an Old Post Resurrection Embarrassment.

The Overpost Armageddon

The Overpost Armageddon is a massive blitz of sequential follow-up e-mails, each of which typically tears a single previous post apart line by line, employing various attacks. The goal of the Overpost Armageddon is to completely overwhelm the defendant, making it literally impossible for them to counter each attack. The author is periodically the reigning master of this particular maneuver, though in his case this is believed to be the result of some neuropsychological disorder such as TLE- or OCD-induced hypergraphia. The problem with this maneuver is that it usually leaves everyone involved — including the attacker — exhausted for days.

The Teflon Don

This is a particularly obnoxious defensive maneuver in which one eliminates all possibility of further damage simply by claiming that the positions taken, rhetorical style employed, formal structure, definitional correctness, or behavior in any way represent one’s own character, beliefs, etc. The Teflon Don is a terminal move, which cannot be countered, though it should be recognized for what it is: the king of all cop-outs.

The Consistency Spasm

The Consistency Spasm is a disorienting attack in which the attacker alternates between two obviously inconsistent positions in order to find maximum advantage from which to press further attacks. It’s not a pretty sight. Only the most steadfast defendant will hang in there instead of simply leaving the ring in disgust.

The Circular Thrash

The Circular Thrash employs single level circular “logic” in order to support the attacker’s position. It’s impossible to counter if undetected, but is a risky proposition: upon discovering a Circular Thrash, the defendant needs to merely cry out “Shenanigans!” in order to call the match and declare victory. If this is done, the attacker who attempted the Circular Thrash is usually surprised to find themselves standing alone in the center of the ring, calling out “Hey! I wasn’t done yet!”

The Running-To-The-Edges

The Running-To-The-Edges is a particularly sophisticated attack derived from both the Extrapolation Explosion and the Level Lunge. In it, the attacker immediately level jumps not with respect to the meta-argument level but rather to the maturity-of-argument level. In doing so, the attacker takes the defendant’s nascent and ill-defined condition and fires a barrage of edge cases at it which appear to contradict it. The conceit is that this invalidates the defendant’s admittedly general argument, by implying that the edge cases cannot be reconciled with the defendant’s position. Russell recently introduced this maneuver to FoRK, where it has enjoyed immediate popularity.

The TrapperKeeper

Named for the South Park terminator spoof episode, The TrapperKeeper is the most beautiful, elegant, and sought after of moves. In it, the attacker baits the defendant with arguments or assertions that the defendant should conditionally agree with. If the bait is successful, if the defendant “touches” the attacker’s TrapperKeeper, sharp spikes shoot out to impale the defendant. Unfortunately, the TrapperKeeper has to this author’s knowledge never been effectively executed on FoRK.

The Tom Whore

The only eponymous move in our repertoire, The Tom Whore is a joy to behold when executed properly. In it, the attacker becomes simultaneously so artfully obscure / obtuse that no retaliation is possible. The immediate effect is that the defendant is left looking rather dazed while picking the Speedo wedgie out of their ass crack.

Whew. Anyone have any additions or edits?

Your faithful servant,

Lucifr

http://xent.com/mailman/listinfo/fork

Tags: , , , , , , , , ,

Comments