
| |
|
How can I be
Spamming Myself? |
The first time it
happened, you were probably confused and even a bit
curious, especially if you were not aware of this
phenomenon of self-sent spam. A message appears in
your e-mail inbox with your own e-mail address as
the sender of the message, but you are pretty sure
that you did not send yourself an offer for a
rock-bottom mortgage rate or secrets to making
millions on eBay. So then, what’s happening?
It’s not because a spammer has hijacked your e-mail
account and is spamming the world using your
identity but because the spammer is disguising the
true sender of the e-mail with a different address,
a process called e-mail spoofing, to target you
specifically. In e-mail spoofing, the sender
manually constructs the e-mail header and chooses
which information (your e-mail address as the
sender, for example) to include.
Why do the spammers do this? To get you to read the
e-mail and/or click on the hyperlinks contained in
the e-mail, of course. Sometimes the spammers want
you to buy the products they are peddling; sometimes
they want you to click on the link contained in the
e-mail, which signals them that their e-mail message
received a live account with a curious human at the
other end, and they can then sell your e-mail
address to other spammers as a potential audience
for more spam from a different source. Sometimes it
is for both these reasons and also to bypass filters
set up through the e-mail client. Most people don’t
even think about having to filter out e-mails sent
to themselves from themselves.
Self-sending spam relies on human nature. A 2002
study by Hamilton, Ontario’s McMaster University
revealed that e-mail’s containing shared names of
the recipient had an emotional appeal that caused
the recipient to read the e-mail in greater numbers
than e-mail that came from sources that did not
share a name with the recipient. Also, human
curiosity compels the recipient to want to know how
he has sent himself a spam e-mail, resulting in the
recipient of self-sent spam to read the e-mail to
investigate. |
|
Top |
|
Why E-Mails Bounce? |
In computer jargon, a bounced e-mail is one that
never arrives in the recipient's inbox and is sent
back, or bounced back, to the sender with an error
message that indicates to the sender that the e-mail
was never successfully transmitted. But what happens
when someone sends an e-mail out into cyberspace,
and why do e-mails sometimes bounce back?
When a user attempts to send an e-mail, he is
telling his e-mail system to look for the domain of
the recipient (for example, webopedia.com) and the
domain's mail server. Once the e-mail system makes
contact with the recipient's mail server, the mail
server looks at the message to determine if it will
let the message pass through the server. If the
recipient's server has predetermined that it is not
accepting e-mails from the sender's address (for
example, if it has blocked the address for
anti-spamming purposes), the server will reject the
message and it will subsequently bounce back to the
sender. The message will also bounce back to the
server if the mail server on the recipient's end is
busy and cannot handle the request at that time.
When an e-mail is returned to the sender without
being accepted by the recipient's mail server, this
is called a hard bounce.
Once the e-mail has been accepted by the recipient's
mail server there are still ways for the message to
be rejected. The mail server has to determine if the
recipient (for example, webmaster@webopedia.com)
actually exists within its system and if that
recipient is allowed to accept e-mails. If the
recipient's address does not exist on the mail
server, then the message will be rejected because
there is no one to deliver the message to. If the
sender misspells the recipient's address (for
example, qebmaster@webopedia.com) then the system
will recognize this as a nonexistent address and
bounce the message back. If the recipient exists but
does not have enough disk space to accept the
message (i.e., if his e-mail application is filled
to storage capacity) then the message will bounce
back to the sender. Some mail systems predetermine a
maximum message size that it will accept and will
automatically bounce the message if it exceeds that
size and some mail systems predetermine a maximum
amount of disk space the user is allowed to occupy
on the server. When an e-mail is returned to the
sender after it has already been accepted by the
recipient's mail server, this is called a soft
bounce. Some mail servers are programmed to accept
incoming e-mails and store them for further analysis
without initially checking to determine if the
recipient exists or is even capable of receiving the
message.
Occasionally, a network failure at the
sender or recipient end will cause an
e-mail to bounce back to the sender.
Typically, a bounced e-mail returns to
the sender with an explanation of why
the message bounced |
|
Top |
|
Getting Rid of Spam |
Spam has become ubiquitous - one of the facts of
life, like taxes. Until strong anti-spam laws are
passed and actually enforced, spam proliferation
will continue because it's proven to reach a mass
audience. If it didn't work, spammers wouldn't waste
their time.
Most people, however, see spam as the scourge of
e-mail and look for ways to stop it from infecting
their e-mail boxes.
There are several ways to block spam from your
e-mail inbox. They say prevention is the best
medicine, so avoid giving out your e-mail address to
unfamiliar or unknown recipients. This has become
very difficult to do, however. Spammers can use
software programs that troll the Internet looking
for e-mail addresses, much like throwing a net in
the ocean and seeing what gets caught in it.
Nowadays it's almost impossible to shop online
without providing a valid e-mail address. Offline
stores are even asking for e-mail addresses in
exchange for discounts or free merchandise. Realize
that what they are doing is potentially opening the
door for a flood of unsolicited e-mails. These
organizations will most likely turn around and sell
their list to someone else looking for valid
e-mails. In these cases, it might be wise to have
more than one e-mail address, one for friends,
family and colleagues and another for unfamiliar
sources. There are many free e-mail services in
cyberspace to choose from.
However, also know that even trustworthy sources may
be unwittingly shelling out your e-mail address.
Ever receive an e-mail greeting card? The sender has
given your e-mail to an organization that may very
well be compiling e-mail lists to sell to spammers.
A second way to stop spam is to use your e-mail
application's filtering features. Most e-mail
applications allow you to block specific messages.
When an offending e-mail comes in, set the filter to
block further incoming mails from that sender.
A more aggressive approach to ridding unwanted
e-mail is to report the e-mailer to the spammer's
ISP. This is not always an easy task. First you must
determine the spam's origins. Many of the bigger and
more commercial ISPs forbid spammers from using
their services and, once discovered, will actively
ban the offending parties from using their services.
But there are plenty of smaller ones that do not. To
find the spam's origins, instruct your e-mail
program to display all of the e-mail's header
information. View the "Received" lines, and working
from top to bottom you can often pinpoint the origin
of spam. Spammers don't typically just send e-mails
from their ISP to yours; that'd be too easy and
apparent. Instead, they channel the e-mails through
one or more ISPs in order to obfuscate the origin,
but each computer that handles the e-mail will
attach a "Received" line to the header. There are
numerous Internet resources available for help in
tracking down the source of spam.
Don't be fooled by phrases such as "to be removed
from this list, click here." Spammers use these
types of catch phrases to entice users to respond to
the e-mails. The spammers may or may not remove your
e-mail from their list. Either way you have told the
spammer that your e-mail address is valid and
reaches a real person. They know this because you
responded and asked them to remove you from the
list. This can actually be more valuable to the
spammers because they can now sell your address to
another spammer with the assurance that the e-mail
address is legitimate. So you may have been removed
from one list, but there's a good chance that you
will end up on another.
Yet another way to deal with spam is to
just not be bothered by it. Accept it as
a fact of life. Delete the e-mails from
your inbox without reading them and move
on from there |
|
Top |
|
Do Cookies Compromise Security? |
Cookies are messages that a Web server transmits to
a Web browser so that the Web server can keep track
of the user's activity on a specific Web site. The
message that the Web server conveys to the browser
is in the form of an HTTP header that consists of a
text-only string. The text is entered into the
memory of the browser. The browser in turn stores
the cookie information on the hard drive so when the
browser is closed and reopened at a later date the
cookie information is still available.
Web sites use cookies for several different reasons:
To collect demographic information about who is
visiting the Web site. Sites often use this
information to track how often visitors come to the
site and how long they remain on the site.
To personalize the user's experience on the Web
site. Cookies can help store personal information
about you so that when you return to the site you
have a more personalized experience. If you have
ever returned to a site and have seen your name
mysteriously appear on the screen, it is because on
a previous visit you gave your name to the site and
it was stored in a cookie so that when you returned
you would be greeted with a personal message. A good
example of this is the way some online shopping
sites will make recommendations to you based on
previous purchases. The server keeps track of what
you purchase and what items you search for and
stores that information in cookies.
To monitor advertisements. Web sites will often use
cookies to keep track of what ads it lets you see
and how often you see ads.
Cookies do not act maliciously on computer systems.
They are merely text files that can be deleted at
any time - they are not plug ins nor are they
programs. Cookies cannot be used to spread viruses
and they cannot access your hard drive. This does
not mean that cookies are not relevant to a user's
privacy and anonymity on the Internet. Cookies
cannot read your hard drive to find out information
about you; however, any personal information that
you give to a Web site, including credit card
information, will most likely be stored in a cookie
unless you have turned off the cookie feature in
your browser. In only this way are cookies a threat
to privacy. The cookie will only contain information
that you freely provide to a Web site.
Cookies have six parameters that can be passed to
them:
The name of the cookie.
The value of the cookie.
The expiration date of the cookie - this determines
how long the cookie will remain active in your
browser.
The path the cookie is valid for - this sets the URL
path the cookie us valid in. Web pages outside of
that path cannot use the cookie.
The domain the cookie is valid for - this takes the
path parameter one step further. This makes the
cookie accessible to pages on any of the servers
when a site uses multiple servers in a domain.
The need for a secure connection - this indicates
that the cookie can only be used under a secure
server condition, such as a site using SSL.
Both Netscape and Microsoft Internet Explorer (IE)
can be set to reject cookies if the user prefers to
use the Internet without enabling cookies to be
stored. In Netscape, follow the
Edit/Preferences/Advanced menu and in IE, follow the
Tools/Internet Options/Security menu to set cookie
preferences. |
|
Top |
|
Are Deleted Files Completely Erased? |
A
common misconception when deleting files
is that they are completely removed from
the hard drive. However, users should be
aware that highly sensitive data can
still be retrieved from a hard drive
even after the files have been deleted
because the data is not really gone.
Files that are moved to the recycle bin
(on PCs) or the trash can (on Macs) stay
in those folders until the user empties
the recycle bin or trash can. Once they
have been deleted from those folders,
they are still located in the hard drive
and can be retrieved with the right
software.
Any time that a file is deleted from a
hard drive, it is not erased. What is
erased is the bit of information that
points to the location of the file on
the hard drive. The operating system
uses these pointers to build the
directory tree structure (the file
allocation table), which consists of the
pointers for every other file on the
hard drive. When the pointer is erased,
the file essentially becomes invisible
to the operating system. The file still
exists; the operating system just
doesn't know how to find it. It is,
however, relatively easy to retrieve
deleted files with the right software.
The only way to completely erase a file
with no trace is to overwrite the data.
The operating system will eventually
overwrite files that have no pointers in
the directory tree structure, so the
longer an unpointed file remains in the
hard drive the greater the probability
that it has been overwritten. There are
also many "file erasing" software
products currently on the market that
will automatically permanently erase
files by overwriting them. |
|
Top |
|
|
 |
| The
number of spam attacks - or mass
mailings of unwanted messages -
increased from 930,546 in May 2001 to
4.7 million in May this year. - Wall
Street Journal |
| |
| Email
users consumers will receive over 3,900
spam messages five years from now as the
amount spent on e-mail marketing
campaigns grows from US$1.4 billion in
2002 to $8.3 billion in 2007. -
Jupiter Research |
| |
|
Spam currently makes up
25 percent to 35 percent of a company's
total mail volume... that's a 25 percent
to 35 percent inflation on your e-mail
bandwidth and storage capacity - CIO
Magazine |
|
 |
|