Archive for February, 2008

Web Spam, Not Just Bots Anymore

Friday, February 29th, 2008

While email spam is battled with relentless focus, web spam becomes more powerful while we aren't watching. By "web spam" I am referring to the type of spam that is posted on blogs, comment sections or forums. Because we have been so barraged with unwanted messages from bots, many sophisticated plugins and scripts have been developed. The Akismet web service blocks nearly all of the common bot-posted spam (online casinos, pharmacy links) and does its job so well, you may be lucky enough to only receive one bogus comment or trackback every few months. Akismet can be implemented into many applications which receive submitted content such as forums, wikis, contact forms and blogs.

So we finally have adequate protection available for these kinds of annoyances. The new arising problem is the spammers are realizing their success rates are dropping. If the bots can't get into our forums and blogs, then who can? Only real human eyes. In the past few months I have witnessed a definite increase in the amount of spam being posted by real people behind their smeared monitors. Unless these posters are directly benefiting from the spam they spew, they must be "employed" by the head spammers. The good part of this is that spammers' pockets are now being emptied. While their bot-operation failure rate climbs as we build more walls, they are reluctantly spending their own money to recoup losses.

The new breed of web spammers aren't just posting about their regular reduced-price selection of watches and illegal software. Now they are even targeting web hosting. It's a bit scary to think that some seedy host start-ups out there are recruiting this underground advertising. Luckily most of the big forums or high traffic blogs are quick to catch their posts and remove them fast. Now that we're back to fighting the old fashioned way, hopefully we'll show them what we've got.

Did You Mean Anti-Phishing or Anti-Tubing?

Wednesday, February 27th, 2008

Senator Ted "Series of Tubes" Stevens (Alaska) along with Senator Olympia Snowe (Maine) introduced the Anti-Phishing Consumer Protection Act this week. The problem is they are honestly in need of phishing education.

The APCPA just doesn't make much sense. First, phishing is already illegal. Second, phishing is going to continue happening no matter how many laws there are. The root of the problem has to be addressed. Blanketing more laws over existing ones is not helping. Third, there is a section in this bill about domain name Whois privacy. This has nothing to do with stopping phishing either. From the pages of the act:

(9) Phishing operators utilize deceptive domain names for their schemes. They routinely register domain names that mimic the addresses of well-known online merchants, and then set up websites that can fool consumers into releasing personal and financial information.

That is hardly the most popular method of phishing. Phishing most often happens within "cracked" directories on existing websites owned by innocent people. If a phish is reported, the data center which hosts the website is notified. This is because IP addresses do not lie. The person who owns the domain name has nothing to do with the phish (at least in a direct way) and they have every right to keep their details private if they want. Phishers are not in a habit of registering "bankofamericaaccountlogin.com" and buying hosting every day, that opens them up to being found easily. So the idea of possibly disallowing private domain registration is a foolish and definitely unfair to domain owners. (Disclaimer: I do believe businesses should have their details listed, but private citizens should have a choice.)

With all of the phish attention lately, I am ready to start a website with the real story of how the series of tubes is really being compromised. 

Selling your web host business — Act I

Wednesday, February 27th, 2008

First we will start with an alert—because timing can be everything.

Marbles… One of the most important parts of any transaction is how many marbles you get to keep. If you are considering selling your company in 2008, 2009 or 2010 please run down (not just trott, put off til' tomorrow…I said RUN) to your tax accountant. If it would be a stock sale, which frankly you really don’t know today, you could be in trouble.

Why? The Bush tax reductions will soon start to evaporate, specifically the long term capital gain treatment which expires December 31, 2008 —- yes a short 10 months away. In a stock transaction it could cost you another 5% in taxes.

Well it is only 5% some people may say. Yes but it takes almost 7% to make that up after paying taxes on the incremental amount you need to cover the poor timing.

So if you are considering selling in 2008 you should start earlier than later. And if you are considering 2009 —- think again.

 ========== MORE ABOUT TOM ==========

New Commerce Communications

E-Mail Tom Direct

USPS Goes Anti-Phish

Tuesday, February 26th, 2008

I received what you might call unsolicited mail from the post office. It arrived addressed to Postal Customer and in bold was the title "Identity theft prevention tips."

If the majority of receivers do open these letters, this project will have very good results. Educating the public about phishing and identity theft online is hard enough so any outside help is really a good idea. The letter inside reads:

 "Enclosed is a brochure that provides you with helpful tips, phone numbers, websites, and steps you can take to deter, detect and defend yourself against identity theft. Please take the time to read through it and follow the advice. Sincerely, John E. Potter, Postmaster General."

The brochure itself is produced by the FTC and is actually the best brochure I've read yet. Most organizations are definitely becoming more savvy about these issues so explanations and solutions are more detailed than ever.

The problem with phishing is still rampant but ever since we implemented our anti-phishing redirect page a lot of other companies are following with the same. Our page had 4,083 visits in January alone due to the scams we have had to disable, mainly on dedicated servers. This is a huge improvement since my last post about the redirection page. I think this is because I continue to believe that the key to solving phishing really lies in educating dedicated server customers. The freedom we allow them should really be considered a danger and treated as such. Dedicated server hosts can still give customers the control they seek but they have to give them guidelines with it.

All or Nothing?

Monday, February 25th, 2008
Today I want to go on about web design in general, and also talk about my web site's home page.

The General Rant

It is said that the 'well rounded scientist' concept is dead, replaced by two groups - people who know everything about nothing (specialists), and people who know nothing about everything (generalists). Technically, there is no difference between the two (something times nothing is nothing), but from experience, the specialists get paid much, much, better - at least when they have a job.

It seems to me that home pages tend to follow the same trend. They either do one thing well, or they try to do everything at once - one stop shopping for all information and entertainment needs. My personal preference is utilitarianism. I want to get in and out quickly, preferably with what I was looking for. Unless, of course, what I want is a leisurely, meandering, tour of content (such as reading the newspapers, or looking for everything for sale on a web site).

For example, let's look at some leading web sites. We all hear about the web search wars between Google, Yahoo! and Microsoft (MSN). When one is at the Google web site, there is a text box, a couple of choices, and a search button. When one is at MSN or Yahoo!, he may think he is reading the supermarket special offers handout - there are boxes with text, pictures, weather info, stock market updates, regular links, bold links. Oh, and somewhere in there is also a search box. Does anyone wonder why Google is winning the search war? Ask.com is similar to Google, and I know other sites emulate the same sparse design as well, and I am sure they are much more attractive to searchers than the busy web pages of portals that also do search.

Let's take a look at some social networking sites. We have Bebo, MySpace, which look like portals with text ads, pictures, links, videos, etc. and rather busy interface. In contrast, Facebook, LinkedIn and Orkut have a functional interface, essentially a box with login/password fields and some additional information. The real sprawling mess is hidden behind that one simple door, which suits me fine. If I want to search for video clips, I would go to YouTube, Revver, or one of their equivalents. When I visit a social network site, I want to get in, do my thing, and get out. Nothing more, nothing less.

Which brings me to my web site and my design preferences.

My Web Site (www.words2u.net)

According to a comment, my site '…contains almost nothing at all, just a little text… Your blog link is a big empty space.. "Technical" is not a live link…', which does show how much one can observe by just looking. I have already apologized about the blog (WordPress died prematurely after I applied a package update), but let's take a minute to review the rest of the comment.

I subscribe to the school of thought that 'if something is worth doing, it is worth doing badly' - in other words, it is better to get something started and improve later, than wait till it is perfect, probably never. So when I decided to go on with the web page, I borrowed a table from another site, slapped on my basic content, added a php line for the dynamic date, and took it live.

I wanted a home page that lists and link to the three other site components, and have a second page with a general description. I am not sure if the design I selected is not in itself over-designed. I will see about the front end in the coming week (sorry, other commitments), and in the meantime, if you have suggestions how further simplify the page, please let me know. If I have enough time and suggestions, I will create several pages based on your comments, and let you choose the best one. Then I will use another one, of course, just to show character.

Q.O.L. and the lost art of communication

Thursday, February 21st, 2008

So, I just received a new fountain pen in themail today.  It arrived two days before I expected it and was a wonderful surprise.   What in the world does this have to do with web hosting and specifically email?  Well, maybe nothing and maybe everything.

 As I work for an email software company (shameless plug) I spend at least 6 hours of most days either reading or writing emails.  I love the way email works, I like how I can keep in touch with my family, friends and collegues.  But where is the romance? I remember the first keyboard I really liked (I mean really really liked and enjoyed using).  It was the best, I thought to myself, I may never have to write anything long hand again.  Then over the years email becomes old hat and things run into one another and the romance is gone.  I still have that old laptop with that same keyboard and while it is totally defunct now, I keep it just because.

Not so long ago I had the pleasure of discovering an old fountain pen I had stored away in a box of junk.  All I can say is whow!  In the past years I have revived my sense of writing paper letters and using the snail to send mail to friends and family.  While I rarely receive replies through the mail, I often get phone calls and emails expressing the pleasure of receiving something in the mailbox that isn't junk.  This has fueled the fire for me and I now have a collection of pens I just love to write with.

So back to what this has to do with hositng and email……  I can't express how much the simple fact of having a wonderful writing instrument has encouraged me to increase my quality of life in everything I do.  How much it has improved the content of my emails and how much I just enjoy communicating with other people again.  I think if we all can take a step back and realize just what it is to communicate with others, we can really start enjoying life

 jb

Free as in Free Lunch (or Beer, definitely not Speech)

Tuesday, February 19th, 2008
Today I want to build on my last entry. The enlightening comments raised interesting issues regarding hosting a web server, which I would like to address before continuing with my hosting saga. Besides, recycling is good for the soul. So let's get right to it:

The Server

My server (this information is listed in the GPS.TechnicalInformation page on my web site wiki), uses a Celeron 700 mHz processor with 384 MB RAM (told ya' I like recycling), connected to a shared 512 kbps line (64 kBps, of which about 25% is overhead and losses). While this would be an acceptable pipeline were it always free, performance can be downright sluggish when any bandwidth intensive activity takes place. In other words, if you have a real site, use a data center with decent pipes and decent equipment, not 1990's technology and analog-grade pipeline, like me.

In my defense, this is not a real business. If the server makes money, I will move it to an ISP. If it does not, and you keep complaining, I will ask you to send me money. Promise.

The Operating System

I use Ubuntu Linux on my server (this is listed in the Technical Information page, http://www.words2u.net/pmwiki/?n=GPS.TechnicalInformation).

Why Linux? It is free and thus can provide infinite ROI with a penny of profit. I am familiar with it and don't mind learning more about it. My server runs pretty sluggishly with Windows 2000 (I used it for my MCSE classes), and trying to fit Windows Server AND SQL on it is asking for trouble. Windows NT and Windows 2000 are no longer supported by Microsoft, and while I hear BSD and Solaris are solid, both present me with a learning curve, which, with my below average intelligence, and above average age, is a major deterrent.

Why Ubuntu? Because Ubuntu's slick desktop, which aims at the uninitiated, has an outstanding package management system, and a very large, active and friendly user community. And it make sense to use the same brand on the server, instead of learning two systems of doing things. RedHat and Novell (Suse) have outstanding products, but these are commercial products aimed at paying corporate clients, which I am not. RedHat does not have an official desktop product at all.

Were I a business, I would consider a commercial product, supported by an established vendor. Windows, Solaris RedHat, and Suse all avail service packages, which provide good value. With Ubuntu, you can also get paid support. I did not, and suffered the consequences. During an upgrade (one line command - sudo apt-get upgrade) my blog software (WordPress), stopped working. Until I remove and reinstall it, my choices are a white screen or an error message. I switched to the latter after reading your comments.

The Server Software

As you, the readers, suggested, it is possible to learn a lot about the system with a few simple tools. A port scan reveals 3 open ports, 21, 22 and 80. Telnet to the ports shows that I use Apache 2, PHP, vsFTPd and OpenSSH.

The Plan

My plan for the web site is to have a simple home page, which leads to three other components - a wiki, a blog, and a content distribution system. For the wiki and the blog, I wanted to use off the (virtual) shelf products. The content distribution system is still in the planning stages. The wiki I use is PmWiki, the blog is (was) WordPress.

The Home Page

I considered using a HTML editor to create the home page. I remember using HomeSite, FrontPage, Netscape Editor and BlueFish in the distant past. But for the 3-4 pages it was not worth the trouble. I decided to follow the lead of the software giants - borrow, modify, and extend. Yes, I used a text editor to create some of the pages (you can identify them by the total lack of standard tags, like head, body, HTML, etc.) Luckily for me, most browsers hide my crude HTML, and render the pages properly.

Is this good enough for a professional site? No. Malformed web pages are inexcusable, and inexpensive professional tools give the ability to track pages and users, provide unique experience based on geographic location or user demographics.

Am I proud of my web site? Like a parent, I am proud of my child even if others find it a bit slow, a bit ugly, or suffering from attention deficit disorder. Remember, the goal was to use this as a learning experience, and this is only the first step in a long march. And I already had a chance to learn from your comments.