Cut 1 host from net - 2/3 reduction in spam worldwide
For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless. http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23... or do a Google News search for "McColo". Alan
On Wed, 12 Nov 2008 16:54:35 -0500, Alan Greenberg <alan.greenberg@mcgill.ca> wrote:
For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless.
http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23...
or do a Google News search for "McColo".
The drop was very limited in time apparently, mostly because these botnets have redundancy built-in. These spammers run businesses, they cannot afford downtime. For a fascinating explanation of how this works, see http://en.wikipedia.org/wiki/Srizbi_botnet Patrick
Indeed! Also interesting is the HostExploit document on McColo. Even though very technical, it contains enough food for thought for the non-technical readers as well: http://hostexploit.com/downloads/Hostexploit%20Cyber%20Crime%20USA%20v%202.0... I am sure Jart will not mind me quoting certain parts:
As consumers and users of the global network we are being marginalized. Just this past week Knujon's Dr. Robert Bruen traveled to an ICANN meeting to speak on behalf of us and the consumer but was told that his voice was unwanted.
By leaving cyber criminals undisturbed to observe them also ensures many ordinary Internet users are still vulnerable to loss. Even one victim is our responsibility if we know the problem. Further the cyber criminals get richer and can use that funding for further badness or even purchase or influence Internet infrastructure by corruption.
Derek Patrick Vande Walle wrote:
On Wed, 12 Nov 2008 16:54:35 -0500, Alan Greenberg <alan.greenberg@mcgill.ca> wrote:
For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless.
http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23...
or do a Google News search for "McColo".
The drop was very limited in time apparently, mostly because these botnets have redundancy built-in. These spammers run businesses, they cannot afford downtime.
For a fascinating explanation of how this works, see http://en.wikipedia.org/wiki/Srizbi_botnet
Patrick
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org
On Thu, 13 Nov 2008 14:05:49 +0200, Derek Smythe <derek@aa419.org> wrote:
Just this past week Knujon's Dr. Robert Bruen traveled to an ICANN meeting to speak on behalf of us and the consumer but was told that his voice was unwanted.
I was there and I attended Dr Bruen's presentation to the ALAC. It was an unplanned meeting. We shortened a WG meeting of ALAC to make room for his presentation, becuse we thought it was important. It was very interesting and I personally regret it has not been given more publicity. Dr Bruen also tried to make his point in plenary another meeting that was not focused on this specific subject. It is only in this context that one could consider it "unwanted". The main issue here it that his presentation was unplanned. ICANN Meeting schedules are already very dense. People attend meetings to deal with a specific business. They just do not have the time to listen to out of topic presentations. Notice for example that many complained that the pblic forum on new GTLDs had been confiscated in favour of VIP speeches from ITU and NTIA. Can I suggest a second try during the Mexico meeting, with a carefully allocated time slot and visibility in the main program. A session involving Knujon, as the ALAC guest, and registrars and ISPs would be most useful to have the broader picture. Patrick
On Nov 13, 2008, at 7:57 AM, Patrick Vande Walle wrote:
ISPs would be most useful to have the broader picture.
Only if you get real ISPs to attend and share. Inviting anyone from the faux ISPC is just another invite to big brand holders who discovered they can get another vote by putting on a different hat come GNSO Council time. /ross
On Thu, Nov 13, 2008 at 6:27 PM, Patrick Vande Walle <patrick@vande-walle.eu
wrote:
On Thu, 13 Nov 2008 14:05:49 +0200, Derek Smythe <derek@aa419.org> wrote:
Just this past week Knujon's Dr. Robert Bruen traveled to an ICANN meeting to speak on behalf of us and the consumer but was told that his voice was unwanted.
I was there and I attended Dr Bruen's presentation to the ALAC. ...It was very interesting and I personally regret it has not been given more publicity.
Is there a transcript of his speech and / or slides ? Sivasubramanian Muthusamy
Indeed! Today the Congress here is voting a new bill to reduce internet crimes. ( 3 years of huge debate but now the bill is not too bad at all) Vanda Scartezini Polo Consultores Associados Alameda Santos 1470 #1407 Tel - +55113266.6253 Mob- +55118181.1464 vanda@uol.com.br Before print think about the Environment "The information contained in this message - and attached files - is restricted, and its confidentiality protected by law. If you are not the intended recipient, please delete this message and notify the sender immediately. Please be advised that the improper use of the aforementioned information will create grounds for legal action." "As informações existentes nesta mensagem e nos arquivos anexados são para uso restrito, com sigilo protegido por lei. Caso não seja o destinatário, favor apagar esta mensagem e notificar o remetente. O uso impróprio das informações desta mensagem será tratado conforme a legislação em vigor." -----Mensagem original----- De: at-large-bounces@atlarge-lists.icann.org [mailto:at-large-bounces@atlarge-lists.icann.org] Em nome de Alan Greenberg Enviada em: quarta-feira, 12 de novembro de 2008 19:55 Para: at-large@atlarge-lists.icann.org Assunto: [At-Large] Cut 1 host from net - 2/3 reduction in spam worldwide For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless. http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23... or do a Google News search for "McColo". Alan _______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann... At-Large Official Site: http://atlarge.icann.org
Dear colleagues, Following the discussions we had in Cairo, during the Registrars meetings, I've proposed to start a work group on the topic of involvement of Registries - Registrars in regards cyber criminality (spam etc). I dare hope to get your interest in this work group which will concentrate on having a workshop during the Summit in Mexico. For those willing to join in this action/work group, please reply asap. Once returned from Tokyo I'll be fully available for more information and willing to share your thoughts and opinions as we have discussed during the meetings in Cairo, together with Robert Bruen from Knujon. Hope to read you soon, Rudi Vansnick President - CEO Internet Society Belgium vzw Vice-chair ISOC European Chapters Coordinating Council Board member EURALO (ALAC-ICANN) /Dendermondesteenweg 143 B-9070 Destelbergen Belgium GSM: +32 (0)475 28 16 32 - Tel: +32 (0)70 77 39 39/ www.isoc.be <http://www.isoc.be> - www.isoc.eu <http://www.isoc.eu> - www.euralo.org <http://www.euralo.org> Vanda Scartezini UOL schreef:
Indeed! Today the Congress here is voting a new bill to reduce internet crimes. ( 3 years of huge debate but now the bill is not too bad at all)
Vanda Scartezini Polo Consultores Associados Alameda Santos 1470 #1407 Tel - +55113266.6253 Mob- +55118181.1464 vanda@uol.com.br Before print think about the Environment "The information contained in this message - and attached files - is restricted, and its confidentiality protected by law. If you are not the intended recipient, please delete this message and notify the sender immediately. Please be advised that the improper use of the aforementioned information will create grounds for legal action."
"As informações existentes nesta mensagem e nos arquivos anexados são para uso restrito, com sigilo protegido por lei. Caso não seja o destinatário, favor apagar esta mensagem e notificar o remetente. O uso impróprio das informações desta mensagem será tratado conforme a legislação em vigor."
-----Mensagem original----- De: at-large-bounces@atlarge-lists.icann.org [mailto:at-large-bounces@atlarge-lists.icann.org] Em nome de Alan Greenberg Enviada em: quarta-feira, 12 de novembro de 2008 19:55 Para: at-large@atlarge-lists.icann.org Assunto: [At-Large] Cut 1 host from net - 2/3 reduction in spam worldwide
For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless.
http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23...
or do a Google News search for "McColo".
Alan
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org ------------------------------------------------------------------------
No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.9.2/1784 - Release Date: 12/11/2008 19:01
Hello Rudy, Please include me in this work. Thank you. Sivasubramanian Muthusamy On Fri, Nov 14, 2008 at 8:45 AM, Rudi Vansnick <rudi.vansnick@isoc.be>wrote:
Dear colleagues,
Following the discussions we had in Cairo, during the Registrars meetings, I've proposed to start a work group on the topic of involvement of Registries - Registrars in regards cyber criminality (spam etc). I dare hope to get your interest in this work group which will concentrate on having a workshop during the Summit in Mexico. For those willing to join in this action/work group, please reply asap. Once returned from Tokyo I'll be fully available for more information and willing to share your thoughts and opinions as we have discussed during the meetings in Cairo, together with Robert Bruen from Knujon.
Hope to read you soon,
Rudi Vansnick President - CEO Internet Society Belgium vzw Vice-chair ISOC European Chapters Coordinating Council Board member EURALO (ALAC-ICANN)
/Dendermondesteenweg 143 B-9070 Destelbergen Belgium GSM: +32 (0)475 28 16 32 - Tel: +32 (0)70 77 39 39/ www.isoc.be <http://www.isoc.be> - www.isoc.eu <http://www.isoc.eu> - www.euralo.org <http://www.euralo.org>
Vanda Scartezini UOL schreef:
Indeed! Today the Congress here is voting a new bill to reduce internet crimes. ( 3 years of huge debate but now the bill is not too bad at all)
Vanda Scartezini Polo Consultores Associados Alameda Santos 1470 #1407 Tel - +55113266.6253 Mob- +55118181.1464 vanda@uol.com.br Before print think about the Environment "The information contained in this message - and attached files - is restricted, and its confidentiality protected by law. If you are not the intended recipient, please delete this message and notify the sender immediately. Please be advised that the improper use of the aforementioned information will create grounds for legal action."
"As informações existentes nesta mensagem e nos arquivos anexados são para uso restrito, com sigilo protegido por lei. Caso não seja o destinatário, favor apagar esta mensagem e notificar o remetente. O uso impróprio das informações desta mensagem será tratado conforme a legislação em vigor."
-----Mensagem original----- De: at-large-bounces@atlarge-lists.icann.org [mailto: at-large-bounces@atlarge-lists.icann.org] Em nome de Alan Greenberg Enviada em: quarta-feira, 12 de novembro de 2008 19:55 Para: at-large@atlarge-lists.icann.org Assunto: [At-Large] Cut 1 host from net - 2/3 reduction in spam worldwide
For those who may not have seen the reports, yesterday one web hosting service in California was largely cut off, resulting in an apparent 2/3 reduction in spam worldwide. No doubt they will relocate elsewhere quickly, but it is impressive nonetheless.
http://voices.washingtonpost.com/securityfix/2008/11/spam_volumes_drop_by_23...
or do a Google News search for "McColo".
Alan
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org
http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org
http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org ------------------------------------------------------------------------
No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.9.2/1784 - Release Date:
12/11/2008 19:01
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org
http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.icann...
At-Large Official Site: http://atlarge.icann.org
participants (7)
-
Alan Greenberg -
Derek Smythe -
Patrick Vande Walle -
Ross Rader -
Rudi Vansnick -
Sivasubramanian Muthusamy -
Vanda Scartezini UOL