K-Squared Ramblings

Distributed Blog Spam

Yesterday morning, I remarked to Katie that it seemed odd that with the vast number of “zombie” computers infected with remote control programs via viruses, trojans, spyware, etc., their primary use so far has been sending spam. After 7-odd years of distributed computing projects ranging from demonstrating weaknesses in encryption schemes to searching for extra-terrestrial radio signals via SETI@Home, and reports that access to zombie nets is selling on the black market, you’d think someone out there would be trying to crack into the DoD or something. (That last link refers to phishing attacks, but the current form of phishing is very tightly coupled with spam.)

Last night I saw proof that zombies are at least branching out a little: they’re not just being used for email spam, but they’re also being used for comment spam. Starting around 8:30, someone started posting pairs of comments every 20-30 minutes. The content and links was identical each time, except for some random numbers in the (probably bogus) email and at the end of the body… but the IP address was different each time.

I caught it around 10:00, added “poker” to the list of moderation triggers, figured they’d give up when they saw their comments weren’t posting, and after another 3 pair (that’s not a legal hand, is it?) I just closed comments on the two posts.

Update 6pm: After a long afternoon dealing with server recovery issues, I checked my email and found about 40 “Please approve…” notices, starting around 1:45 and running all afternoon. All from the same blog spammer. A bit more aggressive than yesterday’s, because they hit a new post every time, but this batch all went straight into moderation. You’d think after you posted 20 comments and none of them showed up, you’d get the clue that it’s not worth posting 20 more…

Update 9am: I installed a plugin last night to block those comments from even reaching the moderation queue. Then laaate last night I noticed that it was screwing up comments with apostrophes, so I disabled it. The moderation notices started coming in immediately. 60 of them from around midnight to about 6am this morning. And none were ever displayed on the site. (Thank you, WordPress!)

The Geek Factor

I saw this CNET headline — Microsoft battles piracy with free software — and my first thought was that they were using some GPL’ed/BSD’ed/etc. tool for tracking or some such. No, they’re just giving away free software to people who will let them remotely verify that their OS installation is legit. Which makes perfect sense once you get out of the open-source/Free software (with a capital F) mindset.

In other news, I feel like I’ve spent the entire month of October rebuilding, recovering, restoring, repairing, reinstalling and retrofitting computers.

Strike that. I have spent the entire month doing that. *Sigh*

Secret Origins

I more-or-less randomly wondered about the origin of the phrase, “My hed iz pastede on yay!” and did a quick google search (the phrase + “origin”). This led me to the Google Meme Observatory, which I am hereby posting so that I can come back and look at it when I have time to, y’know, look at it.

As for the phrase, someone had tracked it down to a particular ex-LJ community, and found the original April 16 post in which someone coined the term regarding an apparently bad image manip featuring the faces of Merry and Pippin. One of the replies: “you do realize you’ve started a goddamn PLAGUE with that expression over at livejournal?” Prophetic words, indeed.

Also worth a link: The Fanfiction Glossary

Smallville Spike

Wow. I expected a spike in traffic after the Flash appeared on last night’s Smallville, but I wasn’t expecting a three-fold increase!

It’s all on the Flash site — no sign of spillover onto this blog, for instance — but Bart Allen’s 15 minutes of fame have propelled him to the #3 spot (right after the Teen Titans and Raven).

With luck I answered people’s questions about the Flash, Bart Allen, and just who is faster in a race between the Flash and Superman. With more luck, some of them will be intrigued enough to come back. With even more luck, some of them will pick up the comic to see what they’re missing.

Read the rest of this entry »

Spoiler-free FPKW Review

Three words: Holy frelling dren!

Alternate review: “Boom. Boom boom boom. Boom boom. Boom! Have a nice day!”

Mailing Mishap

I’ve been getting a lot of what Katie calls “concrete spam” (i.e. junk mail) from charities over the last few months. Eventually I’ll track down who sold my address. But this was an interesting one because they seem to think I’ve gone back to college:

What, did my evil psychic twin get a doctorate over the Internet?

I’ll have to look for this on other mailers and see if anyone else thinks I’m a professor. That may help track down one source.

Strange Searches

Some odd searches through which people have found this site over the last two weeks:

• “vice presidential debate drinking game” somehow hit Fallacious Arguments, despite the fact that the post never mentions a drinking game.
• “breakdown girl” hit Donna Troy via Yahoo images search. Somehow it seems appropriate.
• “folsom street fair 2004 pictures” and similar phrases directed several people to Living in Middle Earth, though I can’t imagine why.
• “sugar packet” — I think someone was looking for real sugar (image search again).
• “rhyming poems by katherine foreman” hit (big surprise) Katie’s Rhyming Poems. (What’s it like to be famous?)
• “space pirate amazon ninja catgirl” sounds ridiculous, wich is exactly why I posted about the game
• “jesse quick in love” actually hit the speed force and Jesse’s mother, but not Jesse Quick herself.
• “how to steal flash” brings up the Flash Museum. I have to wonder what they were actually looking for, though.
• “xxx hermione” and similar (some of them rather explicit) — WTF? These hit Harry Potter Titles I’d Like To See.

Unfortunately there are too many phrases for the stats program I use to show anything that hit less than twice — and that’s where the really odd ones to show up! I’ve skimmed the logs a bit, and some of the choice items include: Read the rest of this entry »

Airport Extreme vs. Linux

One of the reasons our Powerbook stays in Mac OS most of the time (aside from the fact that It Just Works™) is that Yellow Dog Linux 3.0 didn’t have drivers for Airport Extreme, so it can’t connect to the wireless network. I had hoped that YDL 4 (just released) would resolve this — perhaps the driver was only available for the 2.6 kernel, or something.

I finally started looking, and that’s not the case. It seems that the Airport Extreme chipset manufacturer, Broadcom, refuses to release Linux drivers or to release specs to allow anyone else to write Linux drivers.

I don’t expect it to do any good, but I signed my first online petition.

Ah, well, I can do almost everything under Mac OS, and for those occasions that I actually need Linux, I can always go solo or plug in a cable, though it does limit where I can hook it up.

Jeweled Symmetry

Now that I’ve got the complete Alias comic book in TPB form, I’m selling the individual issues on eBay. In getting that set up, I was reminded of an interesting piece of symmetry between Alias and another Bendis series, Powers.

Both feature ex-heroes who now work as “normal” detectives. Christian Walker is a homicide cop, and Jessica Jones is a private investigator. Early on we learn that Walker’s hero identity was Diamond. When we finally get the details of Jessica’s back story, it turns out she went by the name Jewel.

The similarities pretty much end there, though. Despite the names and circumstances, the characters, stories, and overall feel of the two books are quite different. Alias is “comic book noir,” and Powers is a cop show in a city overrun with super-powers. Alias tends to be far more character-driven. Jessica gets into trouble during investigations, but it’s her and the people she’s looking for who are most affected. Powers works on a bigger scale, looking at superheroes as celebrities, and when things go wrong, they affect everyone.

(I’ve got a dozen or so issues of Powers up for auction as well — for the same reason!)

Points for honesty?

This showed up in the spamtraps today:

Subject: Truth of the matter

Dear Sir,

This letter can only define Nigeria Scam, a.k.a. 419. If this mail look like scam to you delete it, we are looking for serious minded person.

As we all know, top officials do loot funds out of the country with non-residence foreigners. When they try and fail, the world hears it as fraud/scam, but when they go through, nobody or a newspaper writes it.

This trade is huge here and people are making lots of money out there in most foreign countries. Though the government are mapping out sophisticated strategies to checkmate unauthorized dealers. From the president to the cleaner in the house, they are all into this trade.

And so on.

This has got to be the most brazen variation I’ve seen — and the first one that admits what it is up front. Of course it goes on to try to convince you that no, this one’s the real thing, we’re only trying to cheat other people, not you, because you wouldn’t fall for that sort of thing, would you?

I’m trying to figure out whether the proper response to this is “WTF” or “O_o” or just “Unbe-flipping-lievable.”

Warspamming Update

In an update to the earlier warspamming story, the defendant was convicted. [Edit: originally linked to Yahoo! News]

Apparently, this is the first conviction obtained under CAN-SPAM.

(Found via The War on Spam.)

Reusable space travel is here!

SpaceShipOne has won the X-Prize! This morning it completed its second trip to the edge of the atmosphere within one week (the prize stipulates it must be within two weeks!)

The Scaled Composites team made history in June with the world’s first privately-funded manned space flight, and last week they made a deal with Virgin to licence the technology for space tourism. The $10 million X-Prize won’t offset the cost of developing SpaceShipOne (estimated at $20 million in the radio story I heard), but it is a prototype, and prototypes always cost more because you’re still experimenting.

The runner-up in the race to the X-Prize, the DaVinci Project, plans to keep going. This is great news as well, because the more different types of craft we have, the less chance one accident will ground the world’s space fleets.

The flights are still suborbital, but the process and technology have been shown to work.

Iced mochas for the Amazons

I recently rented two of the Justice League DVDs. So far I’ve gotten through the opening 3-parter, “Secret Origins,” and the 2-part “Paradise Lost.” I have no idea how far into the series the second disc is.

A scene that stuck in my mind was the newly-formed League looking around their headquarters. As the heroes are deciding whether to join, the Flash remarks on its well-stocked kitchen and offers, “Iced mocha?” Wonder Woman tastes one and says, “Mmm, they don’t have anything like this on Themyscira. I’ll stay.” Aha! The way to an Amazon’s heart is through iced mochas!

So it was even more funny in “Paradise Lost” when the Flash started fantasizing about Paradise Island: “The beach, hundreds of women, and me, the first man they’ve seen in, well, ever. And what do I have with me? Iced mochas for everyone!”

Anyway, on to the review: It’s certainly better than I remember Superfriends being. It does still have a significant cheese factor at times, Read the rest of this entry »

Real Player, Fake Movie

Nice. Real nice. On the heels of Microsoft discovering everything they wrote was vulnerable to malicous JPEG images, now it turns out that RealPlayer can be exploited … on any platform.

Yes, even on Mac OS or Linux. (Presumably the exploit would have to be tailored for each system.)

Go to a web page with a malicious video, and you’re screwed.

Fortunately (a) a patch is available and (b) if I have to, I can live without RealPlayer for a while.

Here’s the advisory.

What, hard work and sacrifice?

Found in a spamtrap today:

“Remove your bills the Christian way”

WTF?

What follows is a long, disjointed collection of unrelated sentences that I suspect is actually Bayes poison (some spammers have figured out that using natural-sounding language is more effective at making Bayesian filters, well, less effective). There is, however, apparently an image above that, which I suspect contains the real payload.

Now if it were trying to get rid of creditors the Christian way, it might make more sense…