The Curious Engineer

All blogs / Security

Terry Zink: Security Talk

learn.microsoft.com/en-us/archive/blogs/tzink

Discussing Internet security in (mostly) plain English

SecurityNetworkingMicrosoft blogsMSDN archive

’10’15’20’25
Posts
966 from 24 Jul 2006 to 20 Jun 2018
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/tzink/feed.xml

2018 6

  1. The Terry Zink Security Talk blog comes to an end
  2. The unauthenticated sender '?' comes to Outlook
  3. Chasing the (very) long tail of unauthenticated domains
  4. If your MX record doesn't point to Office 365, how do you disable spam filtering in Office 365?
  5. A way to (sort of) approximate DMARC aggregate reports in Office 365
  6. How to get images to load in Outlook.com, Office 365, and Outlook email clients

2017 21

  1. If you use Office 365 but your MX record doesn't point to Office, you may want to close down your security settings
  2. When creating support tickets about spam, be sure to include message headers
  3. How to securely add a sender to an allow list in Office 365
  4. Does SPF need an update to handle non-existent includes? I say yes.
  5. A second update to the problem of email forwarding in Office 365
  6. How we got to enforce DMARC for sub-domains of Microsoft's largest consumer email brands
  7. Blocking invalid From: addresses in Office 365
  8. Showing a question mark '?' in the sender photo when a message is not authenticated
  9. Does DMARC need an update to handled branded TLDs? I say yes
  10. Does SPF need an update so subdomains can inherit the policy of its organizational domain? I say yes
  11. How we use the Certified Senders Alliance IP reputation list
  12. Disabling unauthorized forwarding in Outlook.com
  13. An update on the forwarding email problem in Office 365
  14. What do we mean when we refer to the 'sender' of an email?
  15. Why messages sometimes end up in the Junk folder in Outlook.com even when the sender is on your Safe Senders list
  16. Fixing a problem with "Unsubscribe" in Outlook.com
  17. Why adding to Blocked Senders sometimes doesn't block the sender
  18. A tip for mailing list operators to interoperate with DMARC to avoid failures
  19. A quick overview of Outlook.com (Hotmail) sender support
  20. If you want to send to Outlook.com, send with a valid From: address
  21. The difference between adding Safe and Blocked senders in Outlook, vs. Outlook.com

2016 24

  1. Where email authentication falls flat at stopping phishing - impersonation attacks using display tricks
  2. Where email authentication is potentially great – protecting against spoofing from domains with weak authentication
  3. Where email authentication is totally great at stopping phishing – springboard attacks (and filling in the gaps)
  4. Where email authentication is not so great at stopping phishing - random IT phishing scams
  5. Troubleshooting the red (Suspicious) Safety Tip for fraud detection checks
  6. Hotmail/Outlook.com evaluates DKIM a little differently than Office 365
  7. Messages going to Junk even though they aren't spam? Check to see if you have Safe-Lists-Only enabled
  8. How we moved microsoft.com to a p=quarantine DMARC record
  9. Sending mail with invalid From: addresses to Office 365
  10. The outbound IP and HELO format for Office 365
  11. Exchange Online increases its URL filtering
  12. Why does my email from Facebook, that I forward from my outlook.com account, get rejected?
  13. Seven things to know about Safety Tips
  14. Taking the hassle out of email authentication
  15. Outlook.com DKIM signing done, now on to hotmail.com
  16. Understanding Safety Tips in Office 365
  17. What Gmail's changes in their web interface means to you as a customer of Office 365
  18. Can TLS make the user experience better?
  19. A Powershell script to help you validate your DKIM config in Office 365
  20. How antispoofing protection works in Office 365
  21. Common errors in SPF records
  22. I don’t mean to name and shame, but I will
  23. Office 365 is expanding its DKIM-signing to our consumer brands plus adding default signatures to enterprise email traffic
  24. Email authentication should work out of the box and we should not rely upon domain owners to do it themselves

2015 30

  1. The common types of spear phish we see today
  2. Exchange Online is rolling out default DKIM-signing to everyone
  3. DMARC one year later, and what have we learned?
  4. How I personally use Outlook with Office 365
  5. How Office 365 does automatic DKIM key rotation
  6. Manually hooking up DKIM signing in Office 365
  7. Combating spoofing
  8. Analyzing the language of the Safe Links design of Advanced Threat Protection in Office 365
  9. (Not) Using the Additional Spam Filtering option for SPF hard fail to block apparently internal email spoofing
  10. What is the best combination for your SPF record, DKIM record, and DMARC record?
  11. Podcast episode 6 – Facebook’s new PGP feature is nice, but…
  12. A fourth option for solving the problem of DMARC’s incompatibility with mailing lists – Part 3
  13. Three options for solving the problem of DMARC’s incompatibility with mailing lists – Part 2
  14. Solving the problem of DMARC’s incompatibility with mailing lists – Part 1
  15. What is DMARC BestGuessPass in Office 365?
  16. Office 365 and outlook.com/Hotmail are converging infrastructure
  17. Office 365 and outlook.com/Hotmail are converging infrastructure
  18. Office 365 will slightly modify its treatment of anonymous inbound email over IPv6
  19. Podcast episode 4 – Why do spammers spam?
  20. Podcast episode 3 – The psychology of spamming.
  21. How to align with SPF and DMARC for your domain if you use a lot of 3rd parties to send email as you
  22. Best Practices for Exchange Online Protection customers to align with DMARC
  23. How Office 365 does SPF checks for customer-to-customer mail
  24. My podcast: Episode 2 – The Red Queen theory of cyber security
  25. My podcast: Episode 1 – The Terry Zink Security Talk Podcast Begins!
  26. Cyber thieves stealing from businesses and how DMARC can help
  27. The Red Queen theory of Internet security
  28. An update on DKIM-on-IPv4 and DMARC in Office 365
  29. Office 365 releases IP throttling
  30. I am thinking of starting a podcast

2014 26

  1. Office 365 increases its malicious URL coverage
  2. A workaround for receivers who want anonymous inbound email over IPv6 but receive a lot of unauthenticated email
  3. Using DMARC in Office 365
  4. I am now helping out a little bit with Hotmail and outlook.com
  5. Gaining experience with encryption and key rotation
  6. Improving Backscatter detection with Boomerang
  7. Why do I have to give up my email address in order to get discounts?
  8. Slideshow: A brief overview of how email over IPv6 works in Office 365
  9. Slideshow: A brief introduction to DMARC
  10. An interview with William Binney, former NSA analyst and whistleblower
  11. How to create Allow rules in Office 365 for senders over IPv6 (and also for IPv4)
  12. Support for anonymous inbound email over IPv6 in Office 365
  13. Why does spam and phishing get through Office 365? And what can be done about it?
  14. Submitting spam back to Office 365
  15. Does psychology explain why people are upset about NSA spying?
  16. I have been fighting spam for 10 years
  17. Microsoft.com now publishes an SPF Hard Fail in its SPF record
  18. Salt-and-Silver
  19. I got locked out of my house this past week. This reminds me a bit of the NSA.
  20. Blocking executable content in Office 365 for more aggressive anti-malware protection
  21. I received a pretty good Apple phish this morning
  22. The Internet of Everything: Why I will never be out of a job
  23. According to the World Economic Forum, I am helping to fight the seventh most dangerous global risk
  24. Understanding how Exchange Transport Rules work on the Sender
  25. It turns out that the NSA can “jump the air gap”
  26. Understanding identification of Bulk Email in Office 365

2013 25

  1. Why do spammers spam? I try to explain it using the Moralization Gap
  2. I worry more about being hacked than being tracked, and I am in the majority
  3. Humor–Opinions on Internet Privacy
  4. Humor–NSA spying
  5. Humorous, or not-so-humorous, cartoon on the roll-out of healthcare.gov
  6. How is my password manager experiment working so far?
  7. How to create more aggressive Bulk email settings in Exchange Online
  8. Understanding outbound spam controls in Office 365
  9. New features in Office 365
  10. Another humorous anecdote about the NSA story
  11. Supporting email over IPv6, part 1 – An introduction
  12. Smartphone OS market share vs. malware targeted at that OS
  13. Why do safe senders in EOP and FOPE operate on the 5321.MailFrom address instead of the 5322.From?
  14. How to use Safe Senders in EOP and FOPE
  15. I don’t have to do anything and my credit card information gets breached
  16. How to setup your DMARC records if you are outsourcing some, or all, of your email – Part 2
  17. How to setup DMARC records if you are outsourcing some, or all, of your email – Part 1
  18. How to set up your DKIM records if you are outsourcing some, or all, of your email and still build your reputation
  19. How to set up your DKIM records if you are outsourcing some, or all, of your email
  20. How to set up your SenderID records if you are outsourcing some, or all, of your email
  21. How to set up your SPF records if you are outsourcing some, or all, of your email
  22. What I’ve been up to lately
  23. Guest post: Lessons learned from the recent Mandiant report about APT1
  24. Still no blog posts this year
  25. Phishing infographic – how phishing works

2012 110

  1. Out of the office for a while
  2. Practical Cybersecurity, Part 6 – Bringing it all together
  3. Practical Cybersecurity, Part 5 – What should we teach?
  4. Practical Cybersecurity, part 4 – Metacognition
  5. Practical Cybersecurity, Part 2 – Expertise
  6. Practical Cybersecurity, Part 1 – The problem of Education
  7. My behavior has changed when answering my phone due to my suspicious nature of unsolicited email
  8. IT Gangnam Style parody from F5 networks
  9. Another day, another phish campaign
  10. Large scale spoofing campaign
  11. Google, Apple, Microsoft… why is there such fanboy-ism in tech?
  12. A whole slew of security reports
  13. Do you know this guy? The troll? Internet Explorer fights back.
  14. Oh, Microsoft, where art thou?
  15. A promising new antispam technique – does it deliver what it promises?
  16. How to measure False Positive rates
  17. Is the term “cyberwarfare” overstating the case?
  18. The modern face of mobile malware
  19. A couple of unsurprising tidbits on passwords
  20. Evaluating anti-virus products with field studies
  21. How should large financial institutions use hosted filtering?
  22. Will cyberwar create new rules of engagement? And will there be a draft?
  23. The pros and cons of Bring Your Own D(evice|estruction)
  24. Do tech-savvy readers practice what they preach?
  25. A Plan for Email over IPv6, part 5 – Removals, Key differences and standards
  26. A Plan for Email over IPv6, part 4 – Population of the whitelists
  27. A Plan for Email over IPv6, part 3 – A solution
  28. A Plan for Email over IPv6, part 2 – Why we use IP blocklists in IPv4, and why we can’t in IPv6
  29. A Plan for Email over IPv6, part 1 – Introduction, and How Filters Work in IPv4
  30. What do consumers know about Antivirus?
  31. Mail from legitimate webmail sources
  32. The Psychology of Spamming, part 5 - Solutions
  33. The Psychology of Spamming, part 4 - Why we fall for scams
  34. The Psychology of Spamming, part 3 - External factors that influence our decisions
  35. The psychology of spamming, part 1 - How our brains work
  36. Combating phishing
  37. How rainbow tables work
  38. The Backscatterer.org IP list
  39. Designing my app with more anti-tampering in mind
  40. An updated look at botnets
  41. Hotmail to offer strong method for authentication
  42. Microsoft ends up #1 on SpamRankings.net for July
  43. Is my friend is too overconfident in his ability to remain secure?
  44. Designing my app with (anti) tampering in mind
  45. Designing my app with sanity checks in mind
  46. Designing secure data transfer
  47. Designing my app with security in mind
  48. Israeli officials dispute claims of Stuxnet’s joint US/Israel effort
  49. A couple of helpful security tools you can use
  50. Researchers knock out the grum botnet
  51. Today is my 8-year anniversary of fighting spam
  52. My credit card information was leaked to the Internet and all I got was this interesting eBook
  53. Hotmail looking to combat gray mail
  54. Breaking into the security field
  55. Cyber criminals infiltrate even small businesses
  56. Spam from an Android botnet
  57. Who says you can’t have fun at the IETF?
  58. I’m planning an iPad app – now help me out here
  59. Android taking over as the malware author target-of-choice
  60. Spammers’ Aid
  61. Evolution of the antivirus industry
  62. Homeland Security, Cybercrime and terrorism, part 2
  63. Tough week to be LinkedIn
  64. Six steps to sending email over IPv6 – my Internet Draft
  65. What’s up with Yahoo Mail’s spam filter?
  66. Spammers ruining it for everyone
  67. New spam trend
  68. Wonder what China is doing with all of those APTs? Now you know.
  69. What Apple’s security response can learn from Microsoft
  70. Floating villages of Cambodia
  71. Statistics on spoofed mail
  72. Spam levels still lower a year after Rustock
  73. Mac users hit by another wave of malware
  74. SOPA fears risk blocking new cyber-security bill
  75. Upcoming proposed cyber legislation
  76. Pinterest spammer finds it easy to make money
  77. U.S. Outgunned in Hacker War
  78. Top Anonymous/LulzSec hacker caught
  79. Spam catch rates drop
  80. Has the Zeus disruption affected spam at all?
  81. Think SPF is widely deployed? Think again.
  82. The pros and cons of graylisting
  83. Predicting the future of abuse, part 2
  84. Predicting the future of abuse
  85. Argh! Spoofed email got me again!
  86. How Google is fighting back against Android threats
  87. What Android threats look like
  88. The Top 3 Emerging Threats on the Internet
  89. I’m a SpamCop
  90. How did WikiLeaks get the Stratfor emails?
  91. MAAWG updates its name
  92. Hotmail and Gmail are tied in antispam effectiveness
  93. How frequently do botnets reuse IP addresses?
  94. Top bots in 2012 so far
  95. Real or fake?
  96. What do ordinary people think of the Gmail man?
  97. The Stratfor hack is not over yet
  98. The Gmail man!
  99. Spam campaign morphs again
  100. Hotmail rolls out features to help deal with gray mail
  101. My views on SOPA
  102. Some more on the Stratfor/Anonymous hack – protecting user data
  103. Even experts use bad passwords
  104. Taking shots at Windows 8’s new picture password
  105. How Digital Detectives Deciphered Stuxnet – the Most Menacing Malware in History
  106. IBM’s other prediction for 2016 – no passwords
  107. Fallout from the Anonymous/Stratfor hack
  108. IBM predicts the future for 2016 – and it includes no spam
  109. Follow up from eTrade spam – Bank of America spam
  110. Humor – Identity Theft

2011 95

  1. Last trading day of the year – eTrade spam!
  2. Antispam law draws backlash
  3. How much expertise do you need, anyhow?
  4. An Amazing Social Network (comic)
  5. No posting for a couple of weeks
  6. Password advice you can use… maybe
  7. Senate to take up cyber bill in 2012
  8. Taking a timeout from security–the passing of an antispam community member
  9. What Advanced Persistent Threats look like
  10. What mobile malware looks like
  11. ATMs now recognize handwriting
  12. Measuring your level of online safety
  13. Humor: Some funny images
  14. The coolest MAAWG ever
  15. Another conference: Cybersecurity Conference and Expo
  16. Blocking foreign languages in Forefront Online
  17. Oil and Gas Cyber Security Forum
  18. New malware variant: son of Stuxnet?
  19. Hacking isn’t always high-tech
  20. SEC asks companies to disclose cyber attacks
  21. Zero day threats are overstated
  22. Your Browser Matters
  23. Is a spammer running Netflix?
  24. What is email appending and why is it bad?
  25. How to (partially) prevent your domain from being spoofed in inbound messages
  26. Putting financial fraud in perspective
  27. Video: Hire the hackers!
  28. The most commonly used programming language is also the most vulnerable
  29. I was challenged in my response
  30. Are compromised accounts getting better or worse?
  31. How to whitelist a sender for inbound mail
  32. Browser market share–who’s visiting me?
  33. The flip side of outbound spam control
  34. How Win32/FakeSysdef Corrupts Your Computer
  35. What do phishers eat?
  36. The new breed of spam
  37. Spam is on the decline; what are the implications?
  38. Protecting yourself from spear phishing
  39. What is this Google+?
  40. Spam continues to drop
  41. Twitter’s real time abuse detection
  42. The Great Firewall of China
  43. Would you block bit.ly if they cleaned up after themselves?
  44. Why silently dropping mail is a bad idea
  45. Should using bit.ly get you blocked?
  46. Hotmail’s spam percentage declines significantly
  47. Five years of blogging!
  48. New Netflix phishing scam
  49. Mozilla to corporate users – F.O.A.D
  50. Gmail’s new anti-phishing defense
  51. Am I getting too old for this?
  52. Phishing protection… what can you do for me?
  53. My thoughts on Google+
  54. Taking down botnets is good / taking down botnets is bad
  55. New botnet is indestructible / no botnet is indestructible
  56. Stating the obvious – human errors are the weak link in security
  57. No, using bit.ly does not get you blocked
  58. LulzSec calling it quits
  59. Handling the problem of outbound bulk mail
  60. Handling the problem of inbound bulk mail
  61. New hacking technique
  62. Clearing up some data on comparisons
  63. Why it’s important to read the Terms and Conditions
  64. Solving the spam problem
  65. Well, well, well. How the mighty have fallen.
  66. Keeping my email address private
  67. Totally secure security – but who wants to live like bin Laden?
  68. Facebook vs Google – the pot calling the kettle black
  69. How did we all get to be where we are today? The story of guns, germs and steel – Part 3
  70. How did we all get to be where we are today? The story of guns, germs and steel – Part 2
  71. Ontario woman sues Sony over data breach
  72. Fake bin Laden videos and who’s checking you out on Facebook?
  73. Password policies need to be the same if we want users to take our advice
  74. IE9 performing better than Google Chrome at catching malware
  75. Son of computer security expert kidnapped, ransom demanded
  76. ESP compromises and their lack of security
  77. Rustock – a take down that worked but still part of a larger problem of botnets
  78. My girlfriend’s Gmail account was hacked
  79. How to check that your browser is up-to-date
  80. Who has taken over as the most prolific botnet since Rustock was taken down?
  81. My writing skills need improvement. Seriously.
  82. Getting rid of legacy stuff is hard
  83. Digging through the problem of IPv6 and email, part 3
  84. Digging through the problem of IPv6 and email, part 2
  85. Digging through the problem of IPv6 and email, part 1
  86. Microsoft took down Rustock - My own company is going to put me out of a job!
  87. Rustock goes down (again); if this keeps occurring I’ll be out of a job
  88. Black SEO?
  89. If you get additional spam this week, it’s not my fault
  90. Foreign hackers attack Canadian government
  91. ID fraud is dropping
  92. No Facebook friends for Obama girls
  93. Zuckerberg vs Assange, part 2
  94. Humor - How to write good code
  95. I’m still around

2010 137

  1. The Dot Cons
  2. Google’s Priority Inbox feature
  3. Nice work if you can get it
  4. Even more humor
  5. Microsoft Security Essentials – version 2
  6. Request for input on a survey
  7. Recovering a hacked Hotmail account
  8. Humor – The Most Ridiculous CAPTCHA ever
  9. CollegeHumor – If spammers wrote ads
  10. Humor – new CAPTCHA system
  11. The death of email? Hardly.
  12. What’s worse than paid for antivirus? Free antivirus
  13. Our latest outbound spam mitigation technique
  14. Facebook’s new messaging platform
  15. My prediction came true
  16. A fitting proverb
  17. Rethinking the term “false positive SLA”
  18. .com – the spammiest TLD
  19. .com – the riskiest TLD
  20. Measuring incremental efficacy and the value of statistics
  21. Video vignettes
  22. Bredolab botnet infiltrated
  23. You know you’ve made it when others start to copy you
  24. My broker is giving out cyber advice
  25. Measuring spam effectiveness – the flip side of false positives
  26. Why you need large data sets to measure yourself effectively
  27. MSRT tool cleaning up Zeus-related malware
  28. Should vs Must
  29. Some Dilbert humor
  30. Microsoft IP space caught hosting spam
  31. Does handing out business cards constitute opt-in?
  32. Does the computer security industry give good or realistic advice?
  33. The RPZ
  34. ISPs cutting off infected users
  35. A unique approach to measuring effectiveness
  36. What not to do in email
  37. Off to Virus Bulletin
  38. Q&A: Microsoft's botnet wrangler on the fight against Internet crime
  39. Latest Facebook scam
  40. Spam? Or not?
  41. Flurry of malware this past week
  42. Microsoft gets ownership of Waledac domains
  43. Falling for phishes
  44. Don’t post personal information on Facebook; if you do, urban legends could spawn
  45. My Hotmail account has been compromised
  46. All your spam are belong to us
  47. Strong passwords fine, but not necessarily necessary
  48. Latest “Here you have” malware campaign – blast from the past
  49. Spam from web mail services
  50. Should trust be implicit or explicit?
  51. A bit more on Rustock
  52. Some notes on Rustock
  53. The gTLD of choice for spammers - .ru
  54. Institutionalized insecurity
  55. Google rolls out multiple account sign-in
  56. Google Wave bites the dust
  57. What not to publish on Facebook
  58. On using multiple blocklists
  59. Yahoo now does SPF checks
  60. Yet another Facebook spoof
  61. Latest Facebook scamming
  62. Today is my six year mark
  63. Credit card hackers and hotels
  64. Can you break the code?
  65. The voluntary discarding of privacy
  66. Microsoft .NET vs Java – trailer
  67. If you have an iPhone, Apple and Google are watching
  68. Facebook’s spam prevention systems
  69. The efficacy of anti-virus
  70. Twitter feeling the pains of success
  71. Personal dilemma
  72. New Amazon spoof
  73. Microsoft sues Hotmail spammers
  74. Origins of the word spam
  75. Spamhaus settlement knocked down from millions to thousands
  76. Why are *.edu’s compromised so much?
  77. Security starts with not doing stupid things
  78. Welcome to our world, Adobe
  79. More Scareware indictments
  80. Don’t send from the cloud?
  81. A little bit of humor
  82. Keeping Safe Online
  83. FTC kills porn/spam ISP
  84. No cyberattack on Wall Street
  85. Email rules to live by, for marketers
  86. Comparison: Top malware threats
  87. My secrets for making presentations
  88. Should we trust the libertarians?
  89. Microsoft releases its Security Intelligence Report, version 8
  90. Newest round of Twitter spam
  91. CallService.biz shut down by the FBI
  92. More details on the Google cyberattack
  93. Sarah Palin to take the stand in “hacking” trial
  94. Why bother changing your password?
  95. Twitter’s efforts paying off
  96. US Air Force adds training in cyberwar
  97. Out of office spam
  98. How traffic shaping works, part 1
  99. Apparently my reputation precedes me
  100. Federal Appeals Court rejects FCC’s bid to enforce Net Neutrality
  101. An ominous warning
  102. Assessing the botnet threat
  103. Geeks all trust each other but not in China
  104. Survey request from Forefront Server Protection team
  105. A bit about Zeus
  106. Twitter moves to mitigate abuse
  107. Spam trend this week – new malware targeting Facebook
  108. Abusive users
  109. What we know (and learned) from the Waledac takedown
  110. A bit more on stolen information
  111. What do my stats say on Waledac’s takedown?
  112. No love for Microsoft’s Waledac takedown
  113. Malware in a nutshell
  114. Not a great week for outbound spam
  115. Authorities take down the Mariposa botnet
  116. Why send spam over TLS?
  117. More spam via TLS
  118. Old fashioned security
  119. Spam Crackdown Threaten’s Koy4Goff’s Free iPod Industry
  120. A little more on Microsoft’s Waledac shutdown
  121. Microsoft wins a court order to shut down the Waledac botnet
  122. Some stats and figures on DKIM and SPF
  123. What’s all the Buzz about?
  124. New malware threat
  125. Funny cartoon
  126. Which botnet sends the most spam, part 3
  127. Which botnet sends the most spam, part 2
  128. Which botnet sends the most spam?
  129. Australia booting infected computers off their networks
  130. More Facebook spam
  131. Spam is solved, we can all go home now
  132. My new Best Buy $1000 Gift Card
  133. An adventure in Peru, part 7 – Finale
  134. Google’s rocky relationship with China
  135. Another botnet taken down
  136. Analysis of a spam message using extensive spoofing techniques
  137. Google and the cyberattacks

2009 120

  1. Speaking of viruses…
  2. Malware infection update
  3. Has my family learned nothing?
  4. An adventure in Peru, part 2
  5. Now this is funny
  6. An adventure in Peru
  7. Management tips and tricks
  8. This picture is so true
  9. Lorenzo von Matterhorn
  10. If only she knew who she was talking to
  11. Another story about social engineering
  12. Some Microsoft humor
  13. Some antispam humour
  14. A positive (?) story about social engineering
  15. Traveling for the next little while
  16. Virus attachments vs email classified as malware
  17. FireEye knocks Mega-d offline
  18. Changing the title of this blog
  19. The Story of Conficker, part 3
  20. The Story of Conficker, part 2
  21. The story of Conficker
  22. Microsoft’s Security and Intelligence Report, v7, now available
  23. Live Free or Die Hard
  24. Things we can learn from Animaniacs
  25. Keeping track of botnets
  26. I don’t know what it is…
  27. Fooled today… almost
  28. How to reclaim your sender reputation, part 10 - Results
  29. How to reclaim your sender reputation, part 9 – disabling offenders
  30. Are we seeing more spam from Gmail, Hotmail and Yahoo?
  31. How to reclaim your sender reputation, part 8 – More pattern analysis
  32. Yahoo, Gmail, Hotmail compromised
  33. How to reclaim your sender reputation, part 7 – Pattern analysis
  34. The multinational nature of spam
  35. How to reclaim your sender reputation, part 6 – Noise reduction
  36. How to reclaim your sender reputation, part 5 - Monitoring
  37. How to reclaim your sender reputation, part 4 – More options
  38. I wonder if I’ll ever see this in a spam campaign?
  39. How to reclaim your sender reputation, part 3 - Options
  40. How to reclaim your sender reputation, part 2 – The Damage
  41. How to reclaim your sender reputation - Introduction
  42. It’s a good thing I’m not evil
  43. Play the phishing game!
  44. Interesting spam phenomenon
  45. More on Operating System Security
  46. Operating System Security
  47. Linux botnet discovered
  48. Getting stuff done
  49. Information overload
  50. Real life security
  51. Some more on phishing, real vs fake
  52. Don’t shoot the messenger
  53. From Russia with love
  54. Real vs fake
  55. Facebook spam
  56. Couple more thoughts on the Twitter attack
  57. Yahoo now signs with DKIM
  58. New cybersecurity czar resigns... two weeks in
  59. Ssn
  60. Distribution of botnets
  61. Upcoming Conference - Virus Bulletin
  62. My car needs security questions
  63. Why do big companies include so much additional fluff with their IM programs?
  64. To trade or not to trade
  65. Change in policy
  66. Terry Zink's Rule of Free Stuff
  67. Argh! More annoyances!
  68. It turns out that Twitter spam *is* possible
  69. Guess your Social Security number!
  70. Bing gains, Google drops
  71. My take on blacklists, part 2
  72. The Council of Elrond
  73. My take on blacklists - what's known, what's misunderstood and what's too good to be true
  74. Is Twitter spam possible?
  75. Finally, a phish that makes sense to me
  76. More on Click Fraud
  77. Click Fraud
  78. FTC takes down another command-and-control center
  79. Microsoft's new search engine: Bing
  80. Craigslist has some new security measures
  81. Options for dealing with unwanted mail
  82. Ironies
  83. The choice of email platform
  84. Adobe getting security religion
  85. Interesting anti-spam cartoon on Youtube
  86. How virus researchers work
  87. What to do if you're blocked by 88.blacklist.zap
  88. File scanning - whose responsibility is it?
  89. Where's waledac... part 2
  90. The nuances of measuring spam effectiveness, part 4
  91. The nuances of measuring spam effectiveness, part 3
  92. The nuances of measuring spam effectiveness, part 2
  93. More Waledac data
  94. The nuances of measuring spam effectiveness
  95. Truth and deception - phishing
  96. Truth and deception
  97. 97% of emails are spam, says Microsoft SIR
  98. A new(ish) spam in my inbox
  99. Whither, Conficker
  100. What time of the day is worst for spam complaints?
  101. An entertaining video
  102. When do spam outbreaks occur?
  103. Oops. Wish I could take that email back
  104. Ironport's list of Top spam sources
  105. スパムフィルターと外国のスパム、第5部 - Japanese
  106. Invented a new game this week
  107. Spam filters and foreign spam - part 1
  108. What am I seeing today in my spam folder?
  109. KnujOn's list of top ten friendly spam registrars
  110. Proud of my spam team
  111. Spam, not SPAM
  112. Some humor
  113. Cybersecurity and the White House - part 5
  114. Time out for reflection
  115. Cybersecurity and the federal government, part 3
  116. Cybersecurity and the federal government, part 2
  117. Cybersecurity and the federal government
  118. Rule of Comedy: Know Thy Audience
  119. What's the end goal?
  120. The first spam observation of 2009

2008 151

  1. More on whether cybersecurity should be managed from the White House
  2. Merry Christmas!
  3. Personalized Spam
  4. The trouble with SMTP
  5. Sometimes security restrictions are annoying
  6. Security only works if you follow procedure
  7. So true
  8. A conspiracy theory
  9. Operating system security vulnerabilities
  10. Spamhaus lists Microsoft as a spam-friendly ISP - update
  11. Trends from 2008
  12. Do I even bother trying to save the world?
  13. The antispam accuracy of sender verification
  14. Some cool techniques for image filtering
  15. Major spam operation goes offline, spam plummets
  16. Microsoft's Security and Intelligence Report
  17. Why socialism is bad
  18. Postini's new features
  19. Oh, how the mighty have fallen
  20. Obama's victory and spammers?
  21. Apple Mail and the Bounce feature
  22. Stories from China - part 2
  23. Viruses on the streets of China
  24. Spamming on the streets of China
  25. The merits and hazards of redundancy
  26. To collaborate or not?
  27. A CAPTCHA that beats bots and spammers
  28. Funny spam image
  29. Whose fault is it, anyway?
  30. Stopping bots from abusing webmail
  31. Can machines fight spam better than humans?
  32. The Empire Strikes Back!
  33. Et tu, Fool?
  34. I'm living in the Expanded Universe
  35. Other aids in automation
  36. Using statistics to aid in analysis
  37. The automation of analysis?
  38. Note to readers who send me email
  39. Free spam hosting
  40. Outbound spam mitigation - lessons learned
  41. Protecting yourself from phishing, part 2
  42. A day in the life of a phisher
  43. 5 tips for avoiding email scams
  44. A tour of Microsoft
  45. Snatching partial victory from the jaws of defeat... which was snatched from the jaws of victory
  46. Which platform to use?
  47. Fake charity names?
  48. A bit more on spammer economics
  49. A bit more on ZDnet's article
  50. 29% of Internet users have bought something from their spam
  51. Follow up on strengths and weaknesses
  52. Strengths and weaknesses
  53. ZDNet: 1.5m spam emails sent from compromised University accounts
  54. CEO of Nigeria gets a solicitation from the Fed Chairman
  55. A slightly unusual spam
  56. Final post on interview with the spam chief
  57. Update on CNN spam
  58. A bit more on the spam chief interview
  59. Quickly morphing CNN spam
  60. Interview with Yahoo spam chief
  61. CNN spam
  62. The problem of backscatter, part 18 - Wrapping it up
  63. The problem of backscatter, part 17 - Limitations of BATV
  64. The problem of backscatter, part 16 - BATV and SPF
  65. The problem of backscatter, part 14 - Bounce Address Tag Validation
  66. The problem of backscatter, part 13 - An idiosyncrasy
  67. The problem of backscatter, part 12 - Don't make the problem worse by contributing to it
  68. The problem of backscatter, part 11 - Check to see if you sent it in the first place
  69. The problem of backscatter part 10 - Use SPF
  70. The problem of backscatter, part 9 - Block it with content analysis
  71. A pair of anniversaries
  72. The problem of backscatter, part 8 - Why is it so hard to stop?
  73. The problem of backscatter, part 7 - What is it?
  74. The problem of backscatter, part 6 - Who sends the NDRs
  75. The problem of backscatter, part 5 - A bit more on RFC 3464
  76. The problem of backscatter, part 4 - What the RFC says
  77. The problem of backscatter, part 3 - Legitimate bounces
  78. The problem of backscatter, part 2 - The legitimate case
  79. The problem of backscatter, part 1
  80. Define before use should be an enforced rule in production code
  81. My paper on spam metrics, part 3
  82. My paper on spam metrics, part 2
  83. A Common Set of Metrics, part 5
  84. A Common Set of Metrics, part 4
  85. It's like an episode of 24 around here
  86. A Common Set of Antispam Metrics, part 3
  87. A Common Set of Antispam Metrics, part 2
  88. A Common Set of Antispam Metrics, Part 1
  89. How many arrows in the quiver is enough?
  90. MySpace: taking steps to clamp down on application spam
  91. Gmail has an interesting idea to thwart spammers
  92. Spam patterns
  93. Yahoo has a false positive problem and then rolls it back
  94. Sanford Wallace gets sued again
  95. Hard to see, the future is
  96. The importance of botnets in computer security
  97. What makes hackers tick?
  98. Does nobody buy stuff in spring?
  99. Speaking of back doors...
  100. Microsoft takes down a botnet
  101. I'm Gonna Git You Spamma!
  102. Spoofing inside a walled garden
  103. A comparison of antispam vendors
  104. Websense reports on breaking Hotmail's CAPTCHA
  105. Comcast's defense
  106. A little bit more on security and back doors
  107. A little more on security and back doors
  108. Security and back doors
  109. The Kniz paradox
  110. More on Safe Senders
  111. The origins of hacker attacks
  112. Spoof-and-compromise spam technique
  113. Spammers have broken my Email form
  114. The concept of Safe Senders
  115. The dip
  116. Email storage and legal requirements
  117. Spammer pleads guilty to charges
  118. Some updates on traffic statistics
  119. Consumer vs Enterprise
  120. The resurrection of zip attachment spam
  121. Spammers and environmentalists?
  122. To outsource or not to outsource
  123. There are more types of spam than just email spam
  124. EU fines Microsoft record $1.3 billion
  125. Accused spammer's trial to start next month
  126. CAPTCHA's are broken - so now what?
  127. More on PII and IP addresses
  128. IP addresses and PII
  129. How to use the Relative Performance Index
  130. The Relative Performance Index
  131. Was a CAPTCHA broken?
  132. The advantages of being part of a large anti-spam company
  133. Stock spam and bear markets
  134. A couple of more thoughts on the David Ritz case
  135. Piles of stock spam from Gmail last couple of days
  136. Maybe the North Dakota judge should watch more South Park...
  137. Microsoft offers to buy Yahoo
  138. Strange legal requirements
  139. Presenting at TechReady
  140. Some patterns for spam in my inboxes
  141. Outbound filtering - part 7
  142. Yahoo's CAPTCHA security reportedly broken
  143. Outbound filtering - part 6
  144. Outbound filtering - part 5
  145. Outbound filtering - part 4
  146. Outbound filtering - part 3
  147. Outbound filtering - part 2
  148. Outbound filtering - Part 1
  149. Anti-spam service is not just about filtering
  150. Follow up - how many IPs could we potentially block?
  151. Just how many IPs are spamming, anyhow?

2007 147

  1. End-of-year wrap-up
  2. Response to Trust-based messages
  3. Some early stats on TMA
  4. Spam's new nemesis: Trust-based messages
  5. Classic Viagra spam
  6. If perception is everything, then Gmail needs better filtering
  7. Once again, I'm proven right about false positive lag time
  8. A rarity - I'm proven wrong!
  9. The 12 days of Christmas spam song
  10. Numbers don't lie, but they can confuse (part 3)
  11. Numbers don't lie, but they can confuse (part 2)
  12. Numbers don't lie, but they can confuse (part 1)
  13. Security risks in a powerful corporation
  14. It's December! Time for the spam season, right?
  15. Behind the scenes (part 1) - now I know how Homer felt
  16. A couple of types of spam analysts
  17. Review Part 2: Spam Kings
  18. Why change the FP metrics?
  19. Zune making up some ground in advertising
  20. The other half of accurate metrics
  21. Accurate metrics
  22. The disadvantages of being a Program Manager
  23. Missed my shot again!
  24. The advantages of being a PM
  25. Guest blogging on Forefront
  26. Sender authentication part 32: TMA Explained
  27. And speaking of Facebook...
  28. Missed my shot
  29. Naughty Facebook... they just spoofed me!
  30. Do spammers change their tactics based upon recipient verification? Yes, they do.
  31. New spam outbreak: mp3 spam
  32. Google maps vs Live maps
  33. Publicly available spam tool
  34. What does a spam fighter do all day? Part 2
  35. What to do if you're blocked by Hotmail
  36. What does a spam fighter do all day? Part 1b
  37. What does a spam fighter do all day? Part 1a
  38. What does a spam fighter do all day? Part 1
  39. Sender authentication part 30: The canonicalization process
  40. Sender authentication part 29: Some DomainKeys examples
  41. Sender authentication part 28: DomainKey headers in the message
  42. Sender authentication part 27: Public key notation in DNS
  43. Even spammers take vacations
  44. Sender authentication part 26: DomainKeys in a nutshell
  45. Facebook spamming me with annoying ads
  46. Some stats on SPF, DomainKeys and DKIM
  47. Found some spammers today with SPF records set up
  48. Sender authentication part 25: Digital signatures
  49. Sender authentication part 24: Public key encryption
  50. Sender authentication part 23: Secret key encryption and one-way functions
  51. In transit
  52. New spamming tactic?
  53. Phishing vs Spoofing
  54. Where has all the pdf spam gone?
  55. Sender authentication part 21: Some recommendations
  56. Sender authentication part 20: Advantages of PRA vs MAIL FROM
  57. Notes on the CEAS
  58. I haven't disappeared
  59. See you at the CEAS!
  60. Sender authentication part 18: More hazards
  61. Sender authentication part 17: Hazards of SenderID and SPF
  62. Sender authentication part 16: SenderID vs SPF
  63. Some notes on PDF spam
  64. Sender authentication part 15: How SenderID interprets SPF records
  65. Sender authentication part 14: Introduction to SenderID
  66. July 12 - My third year anniversary!
  67. Sender authentication part 13: Some SPF odds and ends
  68. Sender authentication part 12: Some examples of SPF
  69. Sender authentication part 11: More on SPF Syntax (Continued)
  70. Sender authentication part 10: More on SPF Syntax
  71. Sender authentication part 9: SPF Syntax
  72. Sender authentication part 8: Best-Guess SPF
  73. Spamhaus spam
  74. More on spam levels
  75. Update on spam levels
  76. Sender authentication part 7: Shortcomings of SPF
  77. Sender authentication part 6: The basics of SPF
  78. Sender authentication part 5: More on received headers
  79. Sender authentication Part 4: Forward Confirmed Reverse DNS
  80. Sender authentication part 3: Checking the received headers
  81. Sender authentication part 2: Reading email headers
  82. Sender Authentication part 1: The basics of sending email
  83. Sender Authentication
  84. Save the inbox, save the world
  85. SPAM vs spam
  86. Not one of my better moments
  87. A quick introduction to Web 2.0
  88. Good news for a change - even my mother gets it
  89. June 1, 2007 - Spam breaks to the upside
  90. How Hotmail fights spam
  91. One of the world's worst (alleged) spammers arrested
  92. What happens on Facebook stays on Facebook
  93. Hotmail seeing a slowdown in traffic also
  94. If you give stuff away for free, people will abuse it
  95. IETF approves DomainKeys as an official standard
  96. If spam increases one week, what happens the following week?
  97. A new Human-Interactive-Proof from Microsoft Research
  98. OCR and image spam
  99. Sender ID is pretty effective, but on the other hand, so am I
  100. Safety first! Right?
  101. Virus outbreak: April 30 - May 2
  102. EU Spam Symposium: Vienna
  103. Becoming the best: Measure everything
  104. Pre-emptive filtering
  105. Note to MessageLabs... a little help?
  106. What constitutes a good sender?
  107. Strange new spam
  108. Buy stuff from Apple
  109. Can a computer fight spam better than a human, part II
  110. Can a computer fight spam better than a human?
  111. Can spam be used as a leading stock market indicator?
  112. The top anti-spam blogs
  113. Using my Mac to write posts on this blog
  114. How to hack weak passwords
  115. The cost of in-house vs hosted services
  116. Spammers going to sleep?
  117. A trip to Spamatopia - Part 3
  118. Bordering on the ridiculous, but it's still kind of fun
  119. Thursday, March 1 - is anyone out there?
  120. Upcoming webcast on Hosted Services
  121. Cool Pepsi commercial
  122. Small time anti-spam company to a big time one
  123. The Jademaster
  124. How long does the average spam outbreak last?
  125. Anti-spam blogging slowly down as of late
  126. Spammers flipping around types of images
  127. Interview with the spampire
  128. The Merits and Hazards of Two-Point Filtering
  129. Two-Point Filtering
  130. New Year's Resolution Update - Learning Unix better
  131. Sometimes you have to trust my Jedi instincts
  132. New type of spam - Blogspot
  133. Spammers quick on the draw
  134. IronPort's Virus Threat Level
  135. Phishing and spam - similar correlations
  136. What percentage of network traffic comes from botnets?
  137. Are there any anti-spam conferences coming up?
  138. More on daily trends
  139. Daily spam trends - is there a pattern?
  140. Spam level hits 94%... but you heard it here first
  141. Top Ten Ways to Eliminate Spam from Your Inbox
  142. The case for outsourced message management
  143. A New Year's resolution worth keeping
  144. Jim Cramer likes iPod over Zune
  145. Cisco buys IronPort
  146. What happens if we blacklist a legitimate IP?
  147. December not so good for spamming

2006 74

  1. Did our spam plummet with the earthquake in Asia?
  2. What percentage of mail is spam?
  3. Looking for some Mac blogging software
  4. Spam traffic analysis - by volume
  5. Spammers jumping on the Vista bandwagon
  6. Spammers targetting their audience
  7. Is customer feedback useful in determining spam effectiveness?
  8. Uploaded a new avatar
  9. Be skeptical of advertised spam blocking rates
  10. New spam rules of engagement finally starting to sink in
  11. Holiday spam a potential problem?
  12. Trapped on a ledge
  13. Return from the Southern Hemisphere
  14. Et tu, Gmail?
  15. On the road again
  16. Are some days of the week spammier than others?
  17. Want to make a difference? Try fighting spam
  18. Are some days of the week better predictors of spam than others?
  19. More on spam analyst performance
  20. Spam analyst performance
  21. If spam were a stock, I'd want to buy it
  22. Maintaining a wiki
  23. Happy Halloween (tomorrow)
  24. Spamhaus woes linked to rise in spam?
  25. Lest it be thought we aren't doing enough...
  26. We're not crying uncle yet
  27. Stock spammers playing around with payload
  28. Funny line in a message
  29. You know you've been processing spam a long time when...
  30. More on image spam
  31. What do you know? I was right (maybe)
  32. Speak of the devil...
  33. Golden Crosses Not So Golden
  34. Instant message filtering?
  35. Don't answer the door... we know it's our neighbors
  36. And I thought we had problems
  37. Lousy blogging in the past week
  38. Parking a car
  39. Spam pays, but sometimes we catch up to you
  40. Looks like Yahoo has changed their footer
  41. Spam has no political affiliation
  42. I'm hearing rumours...
  43. Back to school, but not for me
  44. Spam volume by weekday
  45. Maintaining my lead is tricky business
  46. It turns out that stock spam works
  47. Theorem 5 - The precision of anti-spam pattern matching techniques are inversely proportional to their risk
  48. Theorem 4 - Improvement in spam filtering effectiveness is achieved by improving detection of the granularily of the "overlap" area in the Spam Curve
  49. Theorem 2 - Spam filters are not 100% effective at avoiding false positives because legitimate email messages can contain spammy content
  50. The more things change, the more they stay the same
  51. Theorem 1 - It is impossible for a message to be both extremely clean and extremely dirty at the same time
  52. Microsoft shares look bullish to me
  53. Spammers using Outlook? That's a switch
  54. The Spam Theorems
  55. The Spam Curve - a theory
  56. Slight shift in focus
  57. More on trends and relationships
  58. Perhaps America has got talent
  59. Spam on the rise
  60. Amusing video
  61. 10,000 different versions of Viagra
  62. Want a rolex? Check your spam folder.
  63. Thoughts on Microsoft stock
  64. How long does a spam run last, anyways?
  65. Dow Theory and stock spam
  66. Useful tips for customers
  67. Where is this spam coming from?
  68. I don't want to brag... but I will
  69. Interesting phobias
  70. Frequency of spam - distribution by category
  71. Examining images - an interesting wrinkle
  72. Cute-sie comments in messages aren't that cute
  73. No such thing as generic Viagra
  74. The inaugural post