Re: Let's try to be productive...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In message <[email protected]>, Barry Shein
<[email protected]> writes

>What has changed recently in the spam-o-verse?

DMARC  ...  now whether is has made a difference is a reasonable
question for research to answer !

>One obvious and well-discussed problem is homograph fraud.

which, to a first approximation, is non-existent -- the APWG six monthly
reports show that the use of non-latin domain names (at all, let alone
for misleading) has only ever been countable on the fingers of one or
two hands ...

where one _does_ see homographs is in people trying to disguise phishing
web pages so that the text looks like "PayPal" but a simple-minded
content scanner (operated by the web hosting company perhaps) will not
detect the page to be a phish ... &Rho; is useful for that...

>4. Social networking.
>
>I seem to get more and more spam which uses a real name probably
>scraped from my facebook friends list or similar (linkedin etc) in an
>automated attempt to get me to open it.
>
>      From: <[email protected]> Chris Lewis

yes, Facebook leaked this information [at scale] for a while about a
year ago (until their security hole was plugged)

interesting that you're still seeing this (or are you just relating
anecdotes from some time back ?)

- -- 
Dr Richard Clayton                         <[email protected]>
                                  tel: 01223 763570, mobile: 07887 794090
                    Computer Laboratory, University of Cambridge, CB3 0FD

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBUsqzEuINNVchEYfiEQJ58QCaAmwRWfe+mJ5r3PPMLBGV/gLvyiYAnR5X
jYfpsbyZbqqlUOnfhClwL1HP
=Ep0F
-----END PGP SIGNATURE-----
-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org