{"id":785,"date":"2003-12-16T16:04:59","date_gmt":"2003-12-16T20:04:59","guid":{"rendered":"http:\/\/www.thewormbook.com\/hlog\/?p=785"},"modified":"2003-12-16T16:04:59","modified_gmt":"2003-12-16T20:04:59","slug":"notes-from-an-arms-race","status":"publish","type":"post","link":"http:\/\/www.thewormbook.com\/hlog\/?p=785","title":{"rendered":"Notes from an arms race."},"content":{"rendered":"Now that my radio programme<\/a> is finally done (it will go out on December 28) I find it hard to return to normal life. So I have been poking around the records of my mailbox at Cornerhost. Since the middle of November, when last I reset the log, SpamAssassin has trashed more than 6500 messages for me. I don’t know quite how many, but there were 6592 unique subject lines used against me in that time, the output of this command.
grep B1 ‘dev\/null’ ~\/.procmail\/log|grep -v ‘dev\/null’|sort|uniq|cut -c 9<\/del> |wc -l<\/div>There are still some things that get through: what provoked this post was a poisoned spam which masquerades as a receipt for something bought with a stranger’s credit card:\n\n\n\n\n
Order number:6608526\nDate: 15-DEC-2003\n\nCustomer information:\n\nDavid Williams\n2735 LINDLEY ST\n\nBRIDGEPORT, CT 06606\nUSA\n\n\nQty. Item                             Unit Price     TAX       %     Total\n==========================================================================\n\n1 x Security Update\n\n(Product ID: 986920)            USD   99.00    0.00   0.00%     99.00\n\n\n\n========================================================================\nTOTAL AMOUNT                                                   USD   99.00\n=========\n\n\n\nPayment type: Credit Card : XXXX-xXXX-XXXX-5830 (Not shown for security purposes)\n\n\n\n======================================================================\n\n\n\n\nActivate the product with the POP code:\n\n16eTPqXqj20-7402nttYEx391-9KZyZqw-796hqkfaFdC-DpKw395-9218<\/pre>\n\n\n
The personalised activation code is a very nice touch, as is the fact that the payload is called “SecurityUpdate_v3.1.1.exe” I’m about to google this. For the moment, all I know is that the Panda antivirus scanner failed to detect anything odd in my mail at all. This is not reassuring.<\/p>","protected":false},"excerpt":{"rendered":"
Now that my radio programme is finally done (it will go out on December 28) I find it hard to return to normal life. So I have been poking around the records of my mailbox at Cornerhost. Since the middle … Continue reading →<\/span><\/a> Continue reading →<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[],"_links":{"self":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts\/785"}],"collection":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=785"}],"version-history":[{"count":0,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=\/wp\/v2\/posts\/785\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=785"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=785"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.thewormbook.com\/hlog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}