<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Storm Worm criminals behind confirmation email spam outbreak</title>
	<atom:link href="http://tech.blorge.com/Structure:%20/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/feed/" rel="self" type="application/rss+xml" />
	<link>http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/</link>
	<description>Technology news</description>
	<lastBuildDate>Sun, 22 Nov 2009 16:15:02 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: amy</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-217713</link>
		<dc:creator>amy</dc:creator>
		<pubDate>Sun, 11 Oct 2009 04:36:53 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-217713</guid>
		<description>I agree with you, your saying is so good and usful for me. Thanks. Are you also like

http://www.360huoyuan.com</description>
		<content:encoded><![CDATA[<p>I agree with you, your saying is so good and usful for me. Thanks. Are you also like</p>
<p><a href="http://www.360huoyuan.com" rel="nofollow">http://www.360huoyuan.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dofus</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-192920</link>
		<dc:creator>dofus</dc:creator>
		<pubDate>Wed, 01 Jul 2009 13:55:16 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-192920</guid>
		<description>Bon marche de Dofus Kamas: http://www.servicegamer.com/dofus-kamas-fr.asp
Dofus: http://www.mmovs.com/dofus-kamas-fr/
Wakfu: http://www.mmovs.com/wakfu-kamas-fr/</description>
		<content:encoded><![CDATA[<p>Bon marche de Dofus Kamas: <a href="http://www.servicegamer.com/dofus-kamas-fr.asp" rel="nofollow">http://www.servicegamer.com/dofus-kamas-fr.asp</a><br />
Dofus: <a href="http://www.mmovs.com/dofus-kamas-fr/" rel="nofollow">http://www.mmovs.com/dofus-kamas-fr/</a><br />
Wakfu: <a href="http://www.mmovs.com/wakfu-kamas-fr/" rel="nofollow">http://www.mmovs.com/wakfu-kamas-fr/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: vbmds</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-112469</link>
		<dc:creator>vbmds</dc:creator>
		<pubDate>Mon, 28 Jul 2008 02:46:49 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-112469</guid>
		<description>A silent tongue and true heart are the most admirable things on earth. http://www.laizjj.cn/</description>
		<content:encoded><![CDATA[<p>A silent tongue and true heart are the most admirable things on earth. <a href="http://www.laizjj.cn/" rel="nofollow">http://www.laizjj.cn/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Evan</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-26113</link>
		<dc:creator>Evan</dc:creator>
		<pubDate>Mon, 27 Aug 2007 18:41:40 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-26113</guid>
		<description>Interestingly, unlike &#039;fast flux&#039; hosting in which DNS records point to dozens of compromised systems with a low TTL set for each, these emails are only pointing to a single IP - a much more specific point of failure (depending on a, how &#039;spam-friendly&#039; the registrar used is, and how responsive the abuse department is for the compromised host).

Granted, these botnets are very distributed, but the use of an IP rather than domain makes it easier for an ISP to confirm a system is affected and take action against it. Contrast that with an abuse report for a domain - which, with fast-flux, may not be pointing to an IP within that ISP&#039;s netblock by the time they get around to researching the issue.</description>
		<content:encoded><![CDATA[<p>Interestingly, unlike &#8216;fast flux&#8217; hosting in which DNS records point to dozens of compromised systems with a low TTL set for each, these emails are only pointing to a single IP &#8211; a much more specific point of failure (depending on a, how &#8217;spam-friendly&#8217; the registrar used is, and how responsive the abuse department is for the compromised host).</p>
<p>Granted, these botnets are very distributed, but the use of an IP rather than domain makes it easier for an ISP to confirm a system is affected and take action against it. Contrast that with an abuse report for a domain &#8211; which, with fast-flux, may not be pointing to an IP within that ISP&#8217;s netblock by the time they get around to researching the issue.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Staff reporters</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-25916</link>
		<dc:creator>Staff reporters</dc:creator>
		<pubDate>Sun, 26 Aug 2007 23:51:27 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-25916</guid>
		<description>Live link removed. Thanks for picking that up.</description>
		<content:encoded><![CDATA[<p>Live link removed. Thanks for picking that up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ed</title>
		<link>http://tech.blorge.com/Structure:/2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/comment-page-1/#comment-25894</link>
		<dc:creator>ed</dc:creator>
		<pubDate>Sun, 26 Aug 2007 21:45:45 +0000</pubDate>
		<guid isPermaLink="false">http://tech.blorge.com/Structure: /2007/08/25/yes-that-confirmation-email-is-spam-laden-with-malware/#comment-25894</guid>
		<description>Whats the point of posting a live link that leads to a trojan infected page?</description>
		<content:encoded><![CDATA[<p>Whats the point of posting a live link that leads to a trojan infected page?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
