CircleID

Comments

Automated Theft of Intellectual Property

• Comment posted Aug 24, 2011 3:53 pm PDT — by Michael Hammer
  There should be additional legal remedy where it can be shown that there is a pattern as described in the article. That is, responding to a request for removal should not provide escape from culpability. Perhaps something along the lines…

How Hard Is It to Deploy DKIM?

• Comment posted Jun 23, 2010 5:40 pm PDT — by Michael Hammer
  Good article John. My only quibble is the amount of time (a week or so) you suggest for the key overlap. If key validation is only occurring at the MTA (Mail Transport Agent) then this is probably a sufficient amount…

More Provocative Reasons for a Mandatory National Breach Disclosure

• Comment posted Apr 12, 2010 2:28 pm PDT — by Michael Hammer
  Fergie makes the right call for the wrong reasons. While I was generally aware of the firing of Robert Maley, I didn't go looking for the details until after reading Fergies post. Mr. Maley was apparently let go for speaking…

An Authenticated Internet

• Comment posted Oct 05, 2009 6:34 pm PDT — by Michael Hammer
  Lauren, I absolutely agree with you on the nature of attacks that are possible if an end user machine is compromised. One of those attacks involves the ability to misdirect users to servers other than the intended destination based on…

• Comment posted Oct 02, 2009 5:46 pm PDT — by Michael Hammer
  LP-What you say here is true, but I was speaking in terms of the DNS. DNSSEC ensures that the DNS query you perform has been answered within the chain of trust. Is what you wrote really true? A very similar…

Google Confirms That Keyword Metatags Don't Matter

• Comment posted Sep 22, 2009 7:55 pm PDT — by Michael Hammer
  I'm a bit confused. If, as you point out, there is no valid reason (better ranking) to use keyword metatags including third party trademarks, then why do you suggest that the courts leave such use alone rather than simply suggesting…

Private Cyber Investigators

• Comment posted Aug 05, 2009 8:34 pm PDT — by Michael Hammer
  I guess context is everything. If one is evaluating logs, configurations and the state of various hosts is one performing incident response or is one performing a forensic investigation with a court and legal procedings in mind? When an incident…

Turn the Table on Content Filtering

• Comment posted Jul 09, 2009 1:40 pm PDT — by Michael Hammer
  Vhlo does not require cooperation of the whole world. Although it aims at recovering the reliability that mail had in the 90s, it only operates in transmissions between trusted parties. There is no such thing as a trusted party unless…

"It's The Internet Stupid" ...I Respectfully Disagree

• Comment posted Jun 15, 2009 2:04 pm PDT — by Michael Hammer
  David, You state that you favor "prohibit[ing] discriminatory or preferential treatment of packets based on sender, recipient or packet contents," So, you favor prohibiting the blocking (discriminatory treatment based on content) of packets originating from the Russian Business Network or…

Fight Phishing With Branding

• Comment posted Jun 12, 2009 4:52 pm PDT — by Michael Hammer
  It's even more complex because Banks (and other organizations) outsource marketing and other functions to 3rd parties. In many cases it is hard to match up the brand with the Mail From domain with the From domain. To make it…

"It's The Internet Stupid" ...I Respectfully Disagree

• Comment posted Jun 09, 2009 1:29 pm PDT — by Michael Hammer
  After reading the article Suresh refers to I find myself agreeing with him. I also find the names of many people I know and respect as signatories to the document. Like Suresh I cannot find myself willing to sign the…

Innovation and Cybersecurity Regulation

• Comment posted Apr 01, 2009 6:39 pm PDT — by Michael Hammer
  James Lewis makes the assertion that the market has failed to secure cyberspace and that the answer is government regulation. He points to a 10 year time frame for the market "experiment". I have difficulty understanding why he would start…

Warning, Danger Lurks Here: Exploring DKIM/ADSP Edge Cases - Missing message-id

• Comment posted Mar 24, 2009 9:35 pm PDT — by Michael Hammer
  Jim, Mark's response to me was the same as yours regarding signing non-existent header fields - specifically message-id. I'm a little more hesitant because I haven't yet thought through the potential for abuse of an unsigned message-id field (or for…

North Dakota Judge Gets it Wrong

• Comment posted Jan 18, 2008 8:58 pm PST — by Michael Hammer
  The discussion ending so soon? I'm always late to the party. One aspect of the statements of fact that I believe raises the hackles of some (such as myself) is that the finding of fact(s) asserts that a particular act…

How Spammers Get Around SPF

• Comment posted Aug 22, 2007 2:59 pm PDT — by Michael Hammer
  Actually Terry, we should all hope that the spammers use SPF. SPF is only one piece of a complex puzzle. It provides a certain level of protection at the ehlo and it protects the RFC2822 Mail From. The claim that…