07.29.07

Update on Acunetix

Posted in spamcompanies at 10:23 pm by blog

A few days ago i posted about how a unique email address i created for signing up to acunetix.com started to receive a large volume of spam. As i wrote that article, i also mailed the company to complain, also cc:ing their upstream provider.
I looked through the original mail from Acunetix, and it came from the IP address: 213.165.181.136, which appears to be a cable provider in Malta. I then looked through my web logs, and low and behold:

213.165.181.136 – – [27/Jul/2007:11:16:27 +0100] “GET /wordpress/2007/07/27/acunetixcom-sells-your-mail-address-to-spammers/ HTTP/1.1” 200 2605 “-” “Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5”
213.165.181.136 – – [27/Jul/2007:15:13:51 +0100] “GET /wordpress/2007/07/27/acunetixcom-sells-your-mail-address-to-spammers/ HTTP/1.1” 200 2605 “-” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5”
213.165.181.136 – – [27/Jul/2007:15:16:00 +0100] “GET /wordpress/2007/07/27/acunetixcom-sells-your-mail-address-to-spammers/ HTTP/1.1” 200 2605 “-” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5”
213.165.181.136 – – [27/Jul/2007:15:42:51 +0100] “GET /wordpress/2007/07/27/acunetixcom-sells-your-mail-address-to-spammers/ HTTP/1.1” 200 2605 “-” “Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5”
213.165.181.136 – – [27/Jul/2007:15:43:00 +0100] “GET /wordpress/2007/07/ HTTP/1.1” 200 7811 “http://www.ev4.org/wordpress/2007/07/27/acunetixcom-sells-your-mail-address-to-spammers/” “Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5”

So interesting… They have viewed my site using several different computers, my guess is several employees of the company. However, they have not replied to my mail… They haven’t yet tried to deny selling their customers’ email addresses. It does look very much like they’re trying to lay low having been caught out.

07.27.07

An email address uniquely used at acunetix.com is now being spammed

Posted in spamcompanies at 9:58 am by blog

A few months ago i signed up to download a piece of software from www.acunetix.com. Aparrently they provide software for testing the security of web sites. Of course i created a unique address for the sole purpose of this signup.
I got the software, had a play with it, and received a couple of followup marketting mails from acunetix, then heard nothing for several months. All fine so far i thought.
Until recently, when I started receiving spams to this address which was uniquely created for acunetix. I got the typical spams, fake rolex watches, cheap software (probably pirated), and various types of medications.
And these were only the spams that reached the second stage of my spam filter, spam which goes over a certain score or comes from a blacklisted address doesn’t even reach this stage, which provides an interface for me to weed out false positives.

I have received a total of 431 spams to this address within the past week.

Introduction to the spam companies category

Posted in spamcompanies at 9:51 am by blog

To combat the problem of websites that need an email address for signup and all the junk mail they send, I came up with an approach designed to let me minimise that problem.

Basically, i create a new email domain and account for each site i sign up for, for instance if i were to sign up to my own site i would create an address like:
blah@www.ev4.org.firenzee.com
This address is unique to the site in question, so that if they continue to send me unwanted emails i can simply remove the account and the mails are gone.

Doing this however, resulting in me making an interesting discovery, not only did a lot of companies send me large amounts of marketting material on a regular basis, but some actually sold or leaked my details to spammers!
Yes that’s right, single use email accounts which were only ever used to sign up to a single website were now receiving bucket loads of the typical viagra, penis enlargement, fake rolex and all the other garbage spams that float around the internet on a daily basis.
So this category here is to name and shame these companies in the hope that the information will disuade people from signing up to such unethical companies, and hopefully in the long run to discourage these companies from such behaviour.

07.09.07

eBay screwing sellers to promote paypal

Posted in Uncategorized at 9:53 am by blog

Today i had a listing cancelled on ebay, for:

“Circumvention of eBay Fees (=LS &12362 JM119848267)”

However, your listing was in breach of eBay’s Circumvention of eBay Fees policy and has been removed from eBay. All fees related to this listing have been credited to
your account. We also notified members who placed bids on the item that the listing has
been canceled.

We would like to take this opportunity to let you know what part of your listing is not permitted.

Your listing(s) contains the following information:

Payment by paypal will incur a 5 additional charge to cover fees

You may not manipulate eBay’s system in order to avoid paying certain eBay fees. This includes practices such as adding previously unspecified fees after the end of the
auction, or charging excessive postage and packaging in order to recoup your listing and Final Value Fees. Fee avoidance provides a poor buying experience and gives you
an unfair advantage over other eBay sellers.

Payment surcharges are a form of fee circumvention. eBay prohibits surcharging by sellers. Surcharging occurs when sellers pass the charges they incur for using eBay or
third party services such as payment services onto buyers.

eBay has adopted this surcharging policy to ensure that all buyers receive clear and accurate pricing information when trading on eBay.co.uk. This surcharge policy
applies only to items listed on eBay.co.uk.

For more information on Circumvention of eBay Fees copy this link into a new browser window:

http://pages.ebay.co.uk/help/policies/listing-surcharges.html

What this basically boils down to is. I as a seller cannot make the buyer pay to cover the charges imposed by paypal… Thus, if a buyer pays for the item with cash, a cheque or some other method I receive all the money. If they pay using paypal, I lose a percentage of it. I don’t consider this at all unreasonable, if a buyer wants to use a method of payment that will cost more, they should foot the bill, not the seller. Ebay are doing this because making buyers pay the paypal charges discourages people from using it, so they screw the sellers instead.
Also let’s not forget that paypal take a cut from the money intended for shipping costs, so sellers have no choice but to inflate shipping costs to cover it.

So as a consequence, i will stop using paypal.

07.04.07

Keziefoods are cheeky bastards, followup

Posted in Uncategorized at 10:06 am by blog

A followup to my earlier posting on http://www.ev4.org/wordpress/2007/03/03/keziefoodscouk-are-cheeky-bastards/ regarding the way their registration page uses javascript to fake you signing up for their newsletter, even when you explicitely unchecked the “subscribe to newsletter” box.

As i stated in my earlier post, i wrote them an email complaining about this horrendous behaviour. A few days later, i got a reply:


From: "Wendy Biggins" (wendy@kezie.com)
To:(MY ADDRESS)
Subject: RE: March Offer

Can you deal with this one!!!!!!

-----Original Message-----
From: MY_ADDRESS [mailto:MY_ADDRESS]=20
Sent: 03 March 2007 10:04
To: wendy@kezie.com
Subject: Re: March Offer

How dare you send me this unsolicited mail.
Your registration form uses javascript to recheck the "subscribe to
newsletter" tickbox, even if it's explicitely been left unchecked.
I was planning to make a purchase from your company, and i went through
the registration form while intentionally leaving the newsletter option
unticked as i don't like to receive floods of junk mail. When i clicked
submit, the newsletter box got automatically ticked by javascript within
the page. This is an illegal and incredibly insulting act, and caused me
to immediately stop placing an order and go elsewhere.
I want my details removed from your system IMMEDIATELY, or else i will
be
forced to report you for sending of unsolicited commercial email.
I also suggest that you modify the ridiculous policy of tricking people
into subscribing to your newsletter, as this highly offensive and
underhanded act will certainly cost you more customers than just me.

This looks like a pretty stupid screwup… It’s obvious she tried to forward this to one of her colleagues, but fucked up and hit reply instead of forward…
I did reply, to let her know of the mistake but have since not received anything back. How very rude of them.

07.01.07

Anti-piracy measures just hurt legitimate users

Posted in Uncategorized at 3:08 pm by blog

I doubt i’m alone in being frustrated with the ridiculous anti-piracy measures these days…
The requirement to have the original CD/DVD in the drive to play a game for instance. I have several games installed on my HD, and the idea of installing games in the first place, was to improve load times and AVOID THE HASSLE OF HAVING TO LOAD ORIGINAL MEDIA AND/OR DAMAGE IT.
I work away a lot, and carry a laptop with me at all times. I don’t want to carry a stack of CDs on the off chance i might want to play them. I dont want to keep transferring the media between my stack at home, and my laptop bag.
People with pirate copies are much better off, they dont have to worry about losing media, they dont have to worry about bringing it along with them. It is actually advantageous to the game player to download a pirate copy. This is in stark contrast to the old anti-piracy advertising associated with analogue video/audio, where pirated copies were noticeably inferior to the originals. The advent of digital media levelled the ground, but rather than do something to compensate for that, companies have gone the other way and taken steps to make the originals actually inferior to the pirate copies.

Having to enter license codes or serial numbers is equally irritating, most people simply aren’t organised enough to keep track of all these small scraps of paper with serial numbers on them, and most people don’t want that much paper laying about. And losing that small piece of paper results in them being completely unable to use software they may have paid a large amount of money for.

Also the old code wheels, and requirements to enter a word/letter from the manual. This was common years ago, on the amiga for instance, and was incredibly irritating. Some even required you to re-enter codes at random points throughout the game, and would punish you if you entered them wrong.

So, i won’t buy games where i have to keep the DVD in the drive to play, and i won’t buy software where i need to enter a code to use it. Why should legitimate customers be at a disadvantage relative to pirates? If this is the thanks we get for buying software, then i think i’l side with the pirates as they don’t shaft their own customers.

License codes are stupid

Posted in Pet Hates at 12:11 pm by blog

Just what is the point of making people enter a “license code” to install a piece of software? How is this supposed to limit piracy? Like many other supposed “anti piracy” measures, it actually hinders legitimate owners, such that pirate copies are actually more useful then legitimate ones.

So to install any version of windows made for over 10 years you need to enter a license code, and this is supposed to stop piracy *how* exactly?
Right now, i can find many torrents offering all these versions of windows for download, all of which either have license codes included (so you still have the hassle of entering them) or better yet, have the requirement removed or the license code pre-entered in some way, such that the install bypasses that annoying requirement.

Another example, is tomtom. I bought one of their GPS devices a few years ago, it came with an SD card with the maps for my country preinstalled, and a larger map on CD that would require a bigger SD card. With the default map, the SD card is about 97% full so there’s very little space for points of interest and such.
So i bought a bigger card, formatted it, put the map and software on it, and the device tells me to go to the site “ttcode.com”. Once there, i had to enter the code the device was displaying, and my “license code” which was aparrently on a sticker affixed to the back of the paper cd wallet.
Now, i have long since lost this paper cd wallet, it’s just a typical white paper cd wallet with a circular plastic window on the front, like all the thousands of others i have. It got lost in with all the others, and may even have been thrown away by now. So i contacted tomtom, their response was that i should buy a whole new device! That’s right, because i lost a tiny little sticker i should buy a whole new gps device. So no, i wasn’t about to do that.
Instead, i went to Google and found myself a keygen. I entered the code from the device into the keygen, and it gave me the code to enter into the device. Enter it i did, and all worked, no hassle, and no stupid little strips of paper to keep track of.
But this also brings up another point, what happens when tomtom decide to stop running the ttcode site? Will this rather expensive device just become a glorified paperweight?

So what are license codes supposed to do:

Prevent piracy – NO, pirates will create keygens or remove the license requirement all together.
Keep track of who leaked keys – assuming keys are even leaked rather than generated or the requirement removed, they cant do much to someone who bought the device/software in cash at some random store, not to mention keys stolen from hacked machines and the like.
Irritate legitimate users – YES, codes get lost and legit users get shafted, entering the code is also a significant hassle that only legitimate users have to bear.

So come on, drop all this shit, stop making the pirate copies better than the legit versions.

06.25.07

Drug companies should not be responsible for research

Posted in Uncategorized at 6:00 pm by blog

Does anyone else see the problems with for-profit drug companies doing all the research into new medications?
For one, when a drug company develops a drug, they will patent it, giving them an artificial monopoly on that drug. They can then keep prices artificially high, because there’s no competing companies offering the same drugs. If you cant afford that price (and many people in poor countries cannot) your screwed.

But how about the hypocrisy of it all? Imagine for a minute that you run a for-profit drugs company… Will you:
a, develop a cure for AIDS, that sufferers will take for a brief time before being cured.
b, develop combination-therapy that, with continued use, will keep sufferers alive but infected with HIV for many years

For-profit companies will take the latter. Why? It’s obvious, why sell a quick effective cure when you can keep selling people a whole cocktail of drugs for many years? It’s in the drug companies interest to offer a less effective treatment that the sufferer will need to keep taking.

So what *should* be done?

1, Abolish patents on medications, and publish medication details in the public domain, use capitalism for what its good for, pushing down prices with competition as drugs companies are forced to produce the same drugs cheaper in order to compete.
2, Have all medical research be done by charities, or non profit organisations like the UN, with all the research openly published and collaborated, so as to avoid multiple organisations repeating the same work.

06.13.07

Inserting random letters into acronyms to make pronounceable words

Posted in Pet Hates at 4:23 pm by blog

Have you ever heard someone refer to SQL (a language commonly used for databases) as “Sequel”?
This really annoys me, they are trying to pronounce an unpronounceable acronym (SQL) by inserting arbitrary vowells into it until it becomes a pronounceable word (SeQueL). Not only does it become a pronounceable word, but it becomes a pronounceable word that has existing meaning!
It’s SQL, pronounced Ess Queue Ell, it’s an acronym! If you dont want to use the acronym, call it “Structured Query Language”, don’t just add additional letters until you get something pronounceable.
I don’t have an issue where an acronym already spells a pronounceable word, like “VOIP”, or “SOAP”, although it can be confusing in cases like SOAP where there is already a word.
But as for adding arbitrary characters until an acronym becomes pronounceable, i submit the following atrocities:

TCP – ToeCaP
WWW – WoWaW
SDK – SoDaK
PCI – PoCI
GPS – GyPSy

What exactly does “unlimited broadband” mean?

Posted in Pet Hates at 3:16 pm by blog

Have you ever seen an advertisement for “Unlimited Broadband” or “Unlimited Phone Service” or similar, where the small print said something like “Fair Use Conditions Apply”?
Quite often, this “Fair Use” policy will actually specify a transfer limit, yes, a LIMIT on an UNLIMITED service, does this not contradict itself? Worse still, are the ones which mention a limit, but dont specify what it is.

Now, the very nature of the Internet and the technologies used to provide broadband will enforce “Fair Use” according to the actual dictionary definition of fair. The available bandwidth will be shared equally among the users who are trying to use it. If there are 50 users, but only one of them is actually trying to use the available bandwidth, then naturally he will be able to transfer more. If 2 users try to use it, they will get half the speed of one etc.

They already caveat the available bandwidth by saying “Up to”, so why not do away with the transfer limits and merely have the service slow down when heavily being used?
Having a bandwidth cap is bad enough, your allocated bandwidth will get eaten up by unsolicited traffic – spam mails, malware trying to infect you (even if it fails, it still consumes some of your bandwidth trying).

At the very least, providers should be forced to _NOT_ advertise services as being unlimited unless they truly are. And if they are limited, then they should be advertised as such, with the limits clearly explained up front.

I would rather have a 512Kb service with no arbitrary limits enforced (technological limitation of 512Kb is 90Gb download per month), than an 8Mb service with some arbitrary limit (theoretically up to 1440Gb per month download). If i have an 8Mb service with a 90Gb limit (effectively limiting me to a 512Kb average anyway) all it takes is for one errant program, an open wireless access point, or one malicious user deciding to conduct a denial of service attack against me, and i’m quickly massively over the limit.
Going over the limit could result in me losing the connection completely, being charged extra (sometimes even unspecified amounts) by the ISP, or possibly being blacklisted so i can’t move to another ISP. And all of this could happen due to no fault of my own, and due to misleading advertising.

« Previous Page« Previous entries « Previous Page · Next Page » Next entries »Next Page »