Archive for July, 2007

One Laptop Per Child Succumbs to the Law of Unintended Consequences

Posted in Internet, breaking news, spam on July 20th, 2007 by Aaron

one laptop per child - olpc

When the epicenter of spam in Nigeria meets the charitable intentions of One Laptop Per Child and the nature of children to explore where they ought not comes:

Nigerian pupils browse porn on donated laptops

one laptop per child - olpcThu 19 Jul 2007, 15:34 GMT

ABUJA, July 19 (Reuters Life!) - Nigerian schoolchildren who received laptops from a U.S. aid organisation have used them to explore pornographic sites on the Internet, the official News Agency of Nigeria (NAN) reported on Thursday.

NAN said its reporter had seen pornographic images stored on several of the children’s laptops.

“Efforts to promote learning with laptops in a primary school in Abuja have gone awry as the pupils freely browse adult sites with explicit sexual materials,” NAN said.

A representative of the One Laptop Per Child aid group was quoted as saying that the computers, part of a pilot scheme, would now be fitted with filters.

Maybe “one laptop per child” got translated into “one lapdance per child”?

We should also have OLPC consider the wisdom of giving the world’s spam capital more tools to perpetuate their scams.

one laptop per child - olpc in nigeria

Add to Yahoo Add to Google Furl this Add to Spurl Save to Del.icio.us Digg IT!

Spam as PDF Attachments

Posted in Uncategorized on July 3rd, 2007 by Aaron

Security Park confirms something I suspected a couple of weeks ago:

A new form of spam disguised as an Adobe Picture Document Format (PDF) attachment has been reported. The spam takes on the appearance of a legitimate business email containing an attached PDF file.

The PDF features the file name ‘username_report.pdf’ - the username in the file name is the same as the email recipient’s name (taken from their email address). The personalisation of the attachment file name makes it appear more legitimate.

The new spam technique was first used in a recent pump ‘n dump spam outbreak that promoted a German company’s stock. According to the Marshal TRACE team, we can now expect to see ongoing use of PDF attachments to communicate spam messages.

“Spammers are struggling to find ways to fool spam filters and get their messages into people’s inboxes,” said Bradley Anstis, Director of Product Management, Marshal. “Using a PDF file as the vehicle for the spam message is an attempt to do just that, as spammers believe that many anti-spam solutions largely ignore PDF files.

“As we recently reported, pump ‘n dump spam has declined dramatically and part of the reason for this is overuse of this method. Users are more savvy and can more readily identify a financial scam. With the recent PDF spam outbreak, the spammers have attempted to add credibility and legitimacy to their messages in an attempt to fool users,” said Anstis.

“The fact that the message contains a PDF attachment, which is a very common business-related file format, is designed to lower the recipient’s suspicions that the message might be spam. We are expecting to see a lot more of PDF spam. The recent pump ‘n dump spam case promoting the German company’s stocks marks the beginning.”

According to Anstis, in the past, spammers avoided this kind of spamming method because attaching file types like PDFs greatly increased the size of the message. Historically spammers used their own servers to send out spam and were inclined to keep the spam size small, enabling them to send out more messages.

Now with the widespread use of zombie networks and spambots, the spammers are less concerned with the size of the message. The spammers have tens of thousands of infected PCs at their command and are able to move large volumes of spam of this type.

At least it’s not a virus, though with PDFs, it’s easy enough to embed a URL that’ll go to a virus-laden site.

Add to Yahoo Add to Google Furl this Add to Spurl Save to Del.icio.us Digg IT!