<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:admin="http://webns.net/mvcb/"
	xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
	<channel>
		<title>Terry Zink &#45; CircleID</title>
		<link>http://www.circleid.com/</link>
		<description>Postings from Terry Zink on CircleID</description>
		<dc:language>en</dc:language>
		<dc:rights>Copyright 2010, unless where otherwise noted.</dc:rights>
		<dc:date>2010-03-05T10:47:00-08:00</dc:date>
		

		
		<item>
			<title> Authorities Take Down the Mariposa Botnet (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100305_authorities_take_down_the_mariposa_botnet</guid>
			<link>http://www.circleid.com/posts/20100305_authorities_take_down_the_mariposa_botnet</link>
			<description><![CDATA[There are a number of sources talking about the takedown of the Mariposa botnet... Spanish authorities, working with researchers from Panda Labs, Defence Intelligence and a couple of other educational institutions, took down the Mariposa botnet (Mariposa is the Spanish word for "butterfly"). The Mariposa botnet is an absolutely enormous with around 12 million (!) nodes doing its bidding. It was involved in things like credit card phishing and identity fraud. <a href="http://www.circleid.com/posts/20100305_authorities_take_down_the_mariposa_botnet">More...</a>]]></description>
			<dc:date>2010-03-05T10:47:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Closing in on the Google Hackers (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100225_closing_in_on_the_google_hackers</guid>
			<link>http://www.circleid.com/posts/20100225_closing_in_on_the_google_hackers</link>
			<description><![CDATA[Joseph Menn has an article on CNN.com wherein the crux of the story is that US experts are closing in on the hackers that broke into Google last month. It is believed by some that the Chinese government sponsored these hackers. China, naturally, denied involvement. My own take is that tools today are sophisticated enough such that you don't necessarily need state sponsorship in order to launch a cyber attack. <a href="http://www.circleid.com/posts/20100225_closing_in_on_the_google_hackers">More...</a>]]></description>
			<dc:date>2010-02-25T20:04:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Is Australia a Hot-Bed of Zombie Activity? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/is_australia_a_hot_bed_of_zombie_activity</guid>
			<link>http://www.circleid.com/posts/is_australia_a_hot_bed_of_zombie_activity</link>
			<description><![CDATA[About a week ago, I <a href="http://www.circleid.com/posts/20100129_australia_booting_infected_computers_off_their_networks/">posted</a> that Australia was getting ISPs to <a href="http://www.theaustralian.com.au/news/call-to-cut-net-link-on-virus-hit-computers/story-e6frg6n6-1225823060022">boot</a> infected computers off of their network. I commented on whether or not this was a good policy. However, there was one thing in that article that I wanted to comment on but didn't... <a href="http://www.circleid.com/posts/is_australia_a_hot_bed_of_zombie_activity">More...</a>]]></description>
			<dc:date>2010-02-09T13:57:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Australia Booting Infected Computers Off Their Networks (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100129_australia_booting_infected_computers_off_their_networks</guid>
			<link>http://www.circleid.com/posts/20100129_australia_booting_infected_computers_off_their_networks</link>
			<description><![CDATA[The Australian has a good article describing the efforts some of their ISPs are making in an attempt to clean up their act: the government is encouraging ISPs to detect computers on their network that are infected and part of botnets, and to communicate to the customer that their system is compromised... Unless the customer feels a little bit of pain they will not change their ways. <a href="http://www.circleid.com/posts/20100129_australia_booting_infected_computers_off_their_networks">More...</a>]]></description>
			<dc:date>2010-01-29T09:01:00-08:00</dc:date>
		</item>
		
		<item>
			<title> The Story of Conficker and the Industry Response (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20091105_the_story_of_conficker_and_industry_response</guid>
			<link>http://www.circleid.com/posts/20091105_the_story_of_conficker_and_industry_response</link>
			<description><![CDATA[On November 2, 2009, Microsoft released its seventh edition of the <em>Security and Intelligence Report (SIR)</em>. The SIR provides an in-depth perspective on the changing threat landscape including software vulnerability disclosures and exploits, malicious software (malware), and potentially unwanted software. Using data derived from hundreds of millions of Windows computers, and some of the busiest online services on the Internet, this report also provides a detailed analysis of the threat landscape and the changing face of threats and countermeasures and includes updated data on privacy and breach notifications. The following is an excerpt from the SIR, pp 29-32, about the Conficker worm and the industry response that showed an incredible amount of collaboration across vendors. <a href="http://www.circleid.com/posts/20091105_the_story_of_conficker_and_industry_response">More...</a>]]></description>
			<dc:date>2009-11-05T18:25:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Compromised Accounts - Are Hotmail, Yahoo and Gmail Seeing an Increase in Spam Sent Out? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20091013_are_hotmail_yahoo_gmail_seeing_increase_in_spam</guid>
			<link>http://www.circleid.com/posts/20091013_are_hotmail_yahoo_gmail_seeing_increase_in_spam</link>
			<description><![CDATA[Last week, I <a href="http://www.circleid.com/posts/20091008_yahoo_gmail_hotmail_compromised_but_how/">commented</a> on the the Gmail/Hotmail/Yahoo username and password leak. The question we now ask is whether or not we are seeing an increased amount of spam from those services. On another blog, they were <a href="http://www.allspammedup.com/2009/10/spam-from-sites-involved-in-data-breach-increases-dramatically/">commenting</a> that various experts were claiming that this is the case. <a href="http://www.circleid.com/posts/20091013_are_hotmail_yahoo_gmail_seeing_increase_in_spam">More...</a>]]></description>
			<dc:date>2009-10-13T08:48:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Yahoo, Gmail, Hotmail Compromised - But How? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20091008_yahoo_gmail_hotmail_compromised_but_how</guid>
			<link>http://www.circleid.com/posts/20091008_yahoo_gmail_hotmail_compromised_but_how</link>
			<description><![CDATA[One of the bigger news stories is that of 10,000 usernames and passwords of Hotmail users were posted this past week, victims of a phishing scam... It seems unlikely to me that this would be a hack where someone would break into Hotmail's servers and access the account information that way. It is much more likely that the spammers got the information by social engineering. Why is this more likely? For one, they'd have to get past all of the firewalls and security measures that Microsoft/Hotmail have to keep intruders out. <a href="http://www.circleid.com/posts/20091008_yahoo_gmail_hotmail_compromised_but_how">More...</a>]]></description>
			<dc:date>2009-10-08T21:00:01-08:00</dc:date>
		</item>
		
		<item>
			<title> The Multinational Nature of Spam (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/the_multinational_nature_of_spam</guid>
			<link>http://www.circleid.com/posts/the_multinational_nature_of_spam</link>
			<description><![CDATA[I received a spam message the other day that went to my Junk Mail Folder. I decided to take a look at it and dissect it piece by piece. It really is amazing to see how spam crosses so many international borders and exploits so many different machines. Spammers have their own globally redundant infrastructure and it highlights the difficulties people have in combating the problem of it. <a href="http://www.circleid.com/posts/the_multinational_nature_of_spam">More...</a>]]></description>
			<dc:date>2009-10-05T06:12:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Oh, Spammer, Where Art Thou? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090819_oh_spammer_where_art_thou</guid>
			<link>http://www.circleid.com/posts/20090819_oh_spammer_where_art_thou</link>
			<description><![CDATA[A few weeks ago, I posted a <a href="http://www.circleid.com/posts/20090717_think_china_highest_spamming_country_think_again/">piece</a> on where individuals spammers were located in terms of sending IP. The United States was number 1, followed by China. This is in terms of total volume of spam that they send. However, a second piece of data that I did not take a look at was where all of the individual spam sites contained within the spam was located. For example, does a lot of spam sent from the United States point to spammy URLs hosted in China? <a href="http://www.circleid.com/posts/20090819_oh_spammer_where_art_thou">More...</a>]]></description>
			<dc:date>2009-08-19T13:27:01-08:00</dc:date>
		</item>
		
		<item>
			<title> Twitter, DDoS and the Motivations Behind the Attack (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090811_twitter_ddos_the_motivations_behind_the_attack</guid>
			<link>http://www.circleid.com/posts/20090811_twitter_ddos_the_motivations_behind_the_attack</link>
			<description><![CDATA[As we all know by now, last week, on Thursday, August 7, Twitter was hit with a denial-of-service attack that took it down for several hours. Other social networking sites like Facebook, LiveJournal, Youtube and Blogger were also hit. They managed to repel the attack although Facebook was not quite as successful as the other larger players. The theory floating about at the moment is that this was a politically oriented play designed to target one guy: a blogger. We are nearing the 1-year anniversary of a the Russian/Georgian 2008 war. There is a pro-Georgian blogger by the username of "Cyxymu" who had accounts on all of these services. <a href="http://www.circleid.com/posts/20090811_twitter_ddos_the_motivations_behind_the_attack">More...</a>]]></description>
			<dc:date>2009-08-11T14:01:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Think China Is the Highest Spamming Country? Think Again (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090717_think_china_highest_spamming_country_think_again</guid>
			<link>http://www.circleid.com/posts/20090717_think_china_highest_spamming_country_think_again</link>
			<description><![CDATA[In my department, we block about 92% of our total email (around 2.5 billion per day) at the network edge without accepting the message. When we do that, we don't see any traffic from that IP anymore and don't keep stats on it due to the overwhelming volume of mail. However, we do keep stats on mail that we block with our content filter. I decided to go and calculate how much spam we receive from each country by mapping the source IP back to its source country... <a href="http://www.circleid.com/posts/20090717_think_china_highest_spamming_country_think_again">More...</a>]]></description>
			<dc:date>2009-07-17T08:29:01-08:00</dc:date>
		</item>
		
		<item>
			<title> Cyber Security and the White House, Part 2 - Cyberwarfare (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20050505_cyber_security_and_white_house_cyberwarfare</guid>
			<link>http://www.circleid.com/posts/20050505_cyber_security_and_white_house_cyberwarfare</link>
			<description><![CDATA[This is a follow-up to my previous <a href="http://www.circleid.com/posts/20090505_cyber_security_and_white_house/">post</a> on Cybersecurity and the White House. It illustrates an actual cyberwarfare attack against Estonia in 2007 and how it can be a legitimate national security issue. Estonia is one of the most wired countries in eastern Europe. In spite of its status of being a former Soviet republic, it relies on the internet for a substantial portion of everyday life -- communications, financial transactions, news, shopping and restaurant reservations all use the Internet. Indeed, in 2000, the Estonian government declared Internet access a basic human right... <a href="http://www.circleid.com/posts/20050505_cyber_security_and_white_house_cyberwarfare">More...</a>]]></description>
			<dc:date>2009-05-05T14:04:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Cyber Security and the White House (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090505_cyber_security_and_white_house</guid>
			<link>http://www.circleid.com/posts/20090505_cyber_security_and_white_house</link>
			<description><![CDATA[A few months ago, an <a href="http://arstechnica.com/news.ars/post/20081210-should-cybersecurity-be-managed-from-the-white-house.html">article</a> appeared on arstechnica.com asking the question "Should cybersecurity be managed from the White House?" During the recent presidential elections in the United States and the federal elections in Canada, the two major players in both parties had differing views that crossed borders. In the US, the McCain campaign tended to favor free market solutions to the problem of cybersecurity, and the Conservatives in Canada took a similar position... <a href="http://www.circleid.com/posts/20090505_cyber_security_and_white_house">More...</a>]]></description>
			<dc:date>2009-05-04T23:24:01-08:00</dc:date>
		</item>
		
		<item>
			<title> Spam Fighting: Lessons from Jack Bauer? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090112_spam_fighting_lessons_jack_bauer</guid>
			<link>http://www.circleid.com/posts/20090112_spam_fighting_lessons_jack_bauer</link>
			<description><![CDATA[As I <a href="http://blogs.msdn.com/tzink/archive/2008/02/05/maybe-the-north-dakota-judge-should-watch-more-south-park.aspx">blogged</a> about several months ago, as did numerous other anti-spam bloggers, David Ritz was sued by Jeffrey Reynolds and a judge in North Dakota agreed with Reynolds. At the heart of the case was that Ritz engaged in anti-spam activities using techniques known only to a small subset of advanced computer users, and used these techniques maliciously against Reynolds... Back in the olden days of spam fighting, some anti-spammers used to use malicious techniques against spammers in order to shut them down... <a href="http://www.circleid.com/posts/20090112_spam_fighting_lessons_jack_bauer">More...</a>]]></description>
			<dc:date>2009-01-12T15:27:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Top 10 Spam Stories of 2008 (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20090101_top_10_spam_stories_of_2008</guid>
			<link>http://www.circleid.com/posts/20090101_top_10_spam_stories_of_2008</link>
			<description><![CDATA[Well, it's a yearly tradition in the western hemisphere that at the end of the year, we compose a top 10 list of the 10 most <insert description here>. Since it is now 2009, I thought that I would create my own list of the top 10 spam stories of 2008. Now, not all of these will be universally applicable to everyone, they are the top 10 stories as seen by me. <a href="http://www.circleid.com/posts/20090101_top_10_spam_stories_of_2008">More...</a>]]></description>
			<dc:date>2009-01-01T14:38:00-08:00</dc:date>
		</item>
		
	</channel>
</rss>