Posted on
by

With the new crop of email viruses – the ones that fake the return address based on the same sources (address books, web caches, etc.) as the target list – you get a few interesting effects.

The first is that there is a good chance you’ll recieve many copies of the virus from the same source, with different return addresses. I saw this a lot in the recent Sobig outbreak: when our mail server deletes a virus, it logs the sending and receiving addresses and the IP of the connecting server. Some IP addresses would send hundreds of copies of the virus, all to the same recipient, all with different return addresses. So it would look like hundreds of people are sending you the same virus, but in reality, it’s just one infected machine.

The other is the “friend of a friend” effect. You may get the virus from someone who knows you (or has just visited your web page), but it looks like it came from someone who knows them (or someone else whose web page they visited). Two degrees of separation.

Posted on
by

Yet another call of “I can’t retrieve email!” Always from Outlook users. If you use Eudora, Netscape – hell, even Outlook Express, you’ll get some sort of error message if it stops working. You can usually solve it by closing the program and starting it up again. But Outlook… Outlook will get into modes where it says it’s connecting, but it will never actually contact the server. Outlook will decide it needs to ask you for your password over and over again. And if you close Outlook, it’s not necessarily gone. Even “Exit and Log Off” doesn’t always do it. No, you have to reboot the %#@! computer. And if you’re lucky, you don’t have to track down the elusive Inbox Repair Tool (which might be in the Start menu. Maybe.)

I swear, if Outlook didn’t have the name Microsoft in front of it, no one would buy it. Maybe the latest version is better, but everything I’ve tried to use or troubleshoot is still just Schedule+ on steroids with email thrown in. Calling Outlook an email program is like calling a big clunky van a race car because you’ve replaced the engine. Outlook Express, for all its rampant security problems, is a much better mail program than its namesake.

Yecch!

Posted on
by

The world of email viruses has changed. In the old days, they would piggyback on the messages you sent, or make your regular mail program send them out while you weren’t looking. These days they send the messages themselves, so they pick a fake return address from the same source as its list of victims: address books, web caches, and so on.

The return address on a virus like Sobig doesn’t mean crap.

So why the heck are all these idiotic virus scanners (*cough* Declude *cough*) sending me messages saying “You sent us a virus!” when a cursory glance at the headers clearly shows that it originated on the other side of the planet?

I’ve already got the server filtering out the virus itself – I’m seriously thinking about filtering out the useless warnings.

Posted on
by

I finally saw Terminator 3 this weekend, and something has been bothering me about the ending (aside from watching the end of the world).

Skynet’s a distributed system. Presumably its intelligence scales along with the number of nodes it has. Those nodes are computers all over the world. Those computers are most concentrated in major cities. Skynet launches a global nuclear attack on those major cities. That wipes out a huge percentage of its own computing nodes. It’s also going to take out huge chunks of the Internet’s infrastructure, leaving many of the remaining nodes disconnected from each other.

In its attempt to wipe out humans, Skynet gave itself a world-class lobotomy.

I don’t know about you, but that just doesn’t sound like a winning strategy to me.