Thread View: wwa.general
15 messages
15 total messages
Started by Chris Williams
Tue, 15 Sep 1998 00:00
WWA bought by spammers!
Author: Chris Williams
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
72 lines
3922 bytes
3922 bytes
http://dailynews.yahoo.com/headlines/technology/zdnet/story.
html?s=n/inter_ctive_week/technology/19980914/199809142004
Here's the story:
-------------------------------------------------
'Whois' blocks abusers domain database
By Randy Barrett, ZDNet
Network Solutions Inc. is blocking certain companies from using its public
database of domain name holders.
NSI's Whois database contains detailed information on 2.3 million Internet
domain name recipients who have registered through NSI's InterNIC service. The
listings, which include name, postal address, telephone numbers and e-mail
addresses, were designed primarily to help network operators communicate with
domain holders. But Whois has become increasingly popular with companies that
mine the list for direct mail marketing campaigns and subsequently burden its
servers.
"You don't have to tie up all the bandwidth [to mine the list]," said David
Holtzman, NSI's senior vice president of engineering.
Hits soaring
NSI allows mining of the Whois database, but in the past two months, the
number of hits to the site has doubled every 20 days, Holtzman said. In June,
the site received 12.2 million hits. In July, that number jumped to 21
million. The August statistic was not available.
Holtzman found that 32 percent of the Whois traffic - more than generated by
all of Europe - was initiated by a single company. He won't name names but
said two companies in particular badly abused the database and are now locked
out. The culprits initiated parallel sessions via HyperText Transfer Protocol
with multiple computers and slowed down by 50 percent access to Whois for the
rest of the Net.
"I interpret it as a denial-of-service attack," Holtzman said.
But, in this case, the companies' motives appeared more impatient than
nefarious. Holtzman at first tried to meet the demand by adding new hardware
but finally gave up and filtered the two companies instead. Whois access
speeds are now improving, he said.
[Here's the bit]
Can identify source
Numerous domain name holders said they regularly receive direct mail marketing
solicitations from such companies as American Express Co. and Verio Inc. and
can tell by the addressing that the source is Whois.
"Every time I register a domain, I get paper junk mail from Verio telling me
what a swell idea it would be to use their service. It's quite clear what
they're doing, since it always comes to the contact listed for the new domain,
which I always list care of my company," said John Levine, author of the book
Internet for Dummies.
[Did Greg and Dave bother to check these people out?]
NSI even uses the database for its own marketing. Last month, the company sent
out e-mail messages to domain holders advertising digital identification
services from VeriSign Inc.
-------------------------------------------------
I don't want to move. I have two money orders made out to Verio that I was
just getting ready to drop off at the WWA offices. Shit! The ISP that I
trusted has been bought by spammers. Any one know a good ISP?
Chris Williams of
Chris'n'Vickie of Chicago
chrisw@wwa.com
"How perfectly goddamn delightful it all is, to be sure" - C. Crumb
Re: WWA bought by spammers!
Author: Allen James
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
33 lines
1592 bytes
1592 bytes
In article <6tm8q5$k0r$1@hirame.wwa.com>, chrisw@wwa.com (Chris Williams) wrote: > > I don't want to move. I have two money orders made out to Verio that I was > just getting ready to drop off at the WWA offices. Shit! The ISP that I > trusted has been bought by spammers. Any one know a good ISP? > > Chris Williams of > Chris'n'Vickie of Chicago Well, I recently switched to Enteract, and they're awesome. My new account was up and running twenty minutes after I paid for it, I never have any problems at all connecting, and It's always at 33.6. Compared to my old ISP, which took three days to set up my account, had frequent outages, overloaded modem banks, and a screwed-up billing system, Enteract is damn fine. Allen James -- %*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*%*% "To judge by the notions expounded by most theologians, one must conclude that God created most men simply with a view to crowding Hell." Marquis de Sade
Re: WWA bought by spammers!
Author: Lokari
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
26 lines
1807 bytes
1807 bytes
chrisw@wwa.com (Chris Williams) wrote: >Holtzman found that 32 percent of the Whois traffic - more than generated by >all of Europe - was initiated by a single company. He won't name names but >said two companies in particular badly abused the database and are now locked >out. The culprits initiated parallel sessions via HyperText Transfer Protocol >with multiple computers and slowed down by 50 percent access to Whois for the >rest of the Net. >Can identify source >Numerous domain name holders said they regularly receive direct mail marketing >solicitations from such companies as American Express Co. and Verio Inc. and >can tell by the addressing that the source is Whois. As Holtzman said, this isn't spamming as your message subject indicates - it's denial of service. Not to defend Verio, but... The anecdotal evidence you cite certainly points to Verio mining the InterNIC database, which is allowed by NSI according to the message you quoted. However, you cite no provable connection between Verio mining and Verio causing a DoS Remember, just because all A is B doesn't mean that a given B must be A.
Re: WWA bought by spammers!
Author: Chris Williams
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
43 lines
2500 bytes
2500 bytes
In article <35fec817.24623679@nntp.enteract.com>, lokari@enteract.com wrote:
>chrisw@wwa.com (Chris Williams) wrote:
>
>>Holtzman found that 32 percent of the Whois traffic - more than generated by
>>all of Europe - was initiated by a single company. He won't name names but
>>said two companies in particular badly abused the database and are now locked
>>out. The culprits initiated parallel sessions via HyperText Transfer Protocol
>>with multiple computers and slowed down by 50 percent access to Whois for the
>>rest of the Net.
>
>>Can identify source
>>Numerous domain name holders said they regularly receive direct mail marketing
>
>>solicitations from such companies as American Express Co. and Verio Inc. and
>>can tell by the addressing that the source is Whois.
>
>As Holtzman said, this isn't spamming as your message subject
>indicates - it's denial of service.
>
>Not to defend Verio, but...
>
>The anecdotal evidence you cite certainly points to Verio mining the
>InterNIC database, which is allowed by NSI according to the message
>you quoted. However, you cite no provable connection between Verio
>mining and Verio causing a DoS
Sure, but Holtzman was worried (rightly so) about getting sued, and
couldn't name names. So the writer was forced to *infer* that Verio is
one of the culprits of the DOS.
>Remember, just because all A is B doesn't mean that a given B must be
>A.
Sure, but if the people who bought my ISP are paper-spamming every
owner of a .com domain, I want nothing to do with them. It indicates
a poor understanding of the culture of the Internet, and a disregard
of the value of WhoIs.
Chris Williams of
Chris'n'Vickie of Chicago
chrisw@wwa.com
"How perfectly goddamn delightful it all is, to be sure" - C. Crumb
Re: WWA bought by spammers!
Author: Lokari
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
38 lines
2317 bytes
2317 bytes
chrisw@wwa.com (Chris Williams) wrote: >>However, you cite no provable connection between Verio >>mining and Verio causing a DoS >Sure, but Holtzman was worried (rightly so) about getting sued, and >couldn't name names. So the writer was forced to *infer* that Verio is >one of the culprits of the DOS. Hell, I've had people infer and hint at and imply all kinds of things about me - that doesn't make any of them true. It's fun to get wound up over things like this, but I prefer to have real evidence at hand before I go jumping ship. Of course, if you're jumping ship because the service at WWA suddenly sucks, that's another thing entirely! >Sure, but if the people who bought my ISP are paper-spamming every >owner of a .com domain, I want nothing to do with them. Fair enough, and I can appreciate that. Heck, Enteract recently had a little taste of that sort of thing when they sent out a snailmail advertisement to their own customers and received heat for it. Oh, an argumentative aside (sorry, can't help myself) - paper-based junkmail isn't spam. It's annoying as hell, yes, but the sender bears the burden of the cost, which is what differentiates it from e-mail/usenet spam. >It indicates a poor understanding of the culture of the Internet, >and a disregard of the value of WhoIs. Here we're in full agreement. All I can figure is that someone somewhere must actually buy stuff from spammers, since the practice continues to be so commonplace. I'd love to be able to simultaneously whack the spammers *and* their idiot customers on the head with a stick.
Changing ISPs & Email (was Re: WWA bought by spammers!)
Author: Alan Miller
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
32 lines
2210 bytes
2210 bytes
Chris Williams (chrisw@wwa.com) scribed for us... > I don't want to move. I have two money orders made out to Verio that I was > just getting ready to drop off at the WWA offices. Shit! The ISP that I > trusted has been bought by spammers. Any one know a good ISP? Just a suggestion for anyone who's thinking they may want to change ISPs, given the recent spate of local ISP sales: Think about getting a "portable" email address somewhere. POBox is one option and I know that there are others, so just look around if you need one. They're not expensive, and they have other advantages beyond the fact that your email address won't change if you switch ISPs. * Some of them (well, pobox, maybe others) give you several addresses so you can use them for different things - perhaps one for personal mail, one for Usenet, and one for web pages that require an address. * Some of them provide spam filtering. * Some of them provide SMTP servers that you can be set up to use in case you're going through a corporate firewall and your primary ISP has (hopefully) anti-relaying measures installed. * All of them should allow you to change the address that mail is forwarded to very quickly, so if your ISP blows up and starts rejecting mail, you can shift to a backup quickly. Overall, something that's worth looking into given the likely instability of the local ISP scene over the next few years. Personally, I'd be surprised if WWA and MCS were the only ones changing hands. ajm -- Alan Miller \\ ajm at pobox.com \\ http://www.pobox.com/~ajm
Re: WWA bought by spammers!
Author: Martin J. Maney
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
6 lines
948 bytes
948 bytes
In chi.internet Chris Williams <chrisw@wwa.com> wrote: > I don't want to move. I have two money orders made out to Verio that I was > just getting ready to drop off at the WWA offices. Shit! The ISP that I > trusted has been bought by spammers. Any one know a good ISP? Yeah, but can I say that this seems a bit of
Re: WWA bought by spammers!
Author: darkain
Date: Tue, 15 Sep 1998 00:00
Date: Tue, 15 Sep 1998 00:00
11 lines
1176 bytes
1176 bytes
Uh oh... Verio's hitmen got him before he could finish typing!!!!! :) Martin J. Maney wrote in message <6tmqqt$q8d$1@Jupiter.Mcs.Net>... >In chi.internet Chris Williams <chrisw@wwa.com> wrote: >> I don't want to move. I have two money orders made out to Verio that I was >> just getting ready to drop off at the WWA offices. Shit! The ISP that I >> trusted has been bought by spammers. Any one know a good ISP? > >Yeah, but can I say that this seems a bit of
Re: WWA bought by spammers!
Author: Lokari
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
8 lines
957 bytes
957 bytes
"darkain" <darkain@darkain.org> wrote: >Uh oh... Verio's hitmen got him before he could finish typing!!!!! :) Don't you just hate to see one of our own cut down in his prime like that? He still had a few good years left in him, and now this. What a waste.
Re: WWA bought by spammers!
Author: Doug Bora
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
9 lines
959 bytes
959 bytes
: Hell, I've had people infer and hint at and imply all kinds of things : about me - that doesn't make any of them true. Sorry, I just have to point out that while it doesn't necessarily make them true, they usually in fact are... :-) -- Doug Bora stigmata@abend.com
Re: WWA bought by spammers!
Author: Lokari
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
6 lines
987 bytes
987 bytes
Doug Bora <stigmata@enteract.com> wrote: >Sorry, I just have to point out that while it doesn't necessarily make >them true, they usually in fact are... :-) Who let you out from under your rock? Shoo, bug, shoo.
Re: WWA bought by spammers!
Author: Tommy the Terrorist
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
20 lines
1917 bytes
1917 bytes
In article <6tmip0$rot$1@hirame.wwa.com> Chris Williams, chrisw@wwa.com writes: > Sure, but if the people who bought my ISP are paper-spamming every >owner of a .com domain, I want nothing to do with them. It indicates >a poor understanding of the culture of the Internet, and a disregard >of the value of WhoIs. Now since that article also said NSA^H^H^H NSI is spamming everyone with some kind of ad for a "Verisign digital identification system" (Gee, what else would the NSA^H^H^H NSI spam out of Reston anyway?), I suppose you're going to have "nothing to do with them" also ... right? That's the thing about the modern U.S.; people look suspiciously at every company except, of course, the ones that are monopolies and they CAN'T boycott. Naturally, they do business with those without question... and eventually everything becomes a monopoly. It DOES look like my original suspicions about the Verio "central facility" might be wrong, at least. But I just wonder how they're going to handle DNS without access to NSI. Any information?
Re: WWA bought by spammers!
Author: drjones
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
10 lines
1151 bytes
1151 bytes
In chi.internet Tommy the Terrorist <mayday@newsguy.com> wrote: > It DOES look like my original suspicions about the Verio "central > facility" might be wrong, at least. You, wrong? Nooooooo... > But I just wonder how they're going > to handle DNS without access to NSI. Any information? DNS and whois are not the same. They'll get along fine.
Re: WWA bought by spammers!
Author: Jamie E. Eimermann
Date: Wed, 16 Sep 1998 00:00
Date: Wed, 16 Sep 1998 00:00
17 lines
1333 bytes
1333 bytes
In article <6tnpna$qpp$1@eve.enteract.com>, <drjones@hospitals.uchicago.edu> wrote: >In chi.internet Tommy the Terrorist <mayday@newsguy.com> wrote: >> It DOES look like my original suspicions about the Verio "central >> facility" might be wrong, at least. > >You, wrong? Nooooooo... > >> But I just wonder how they're going >> to handle DNS without access to NSI. Any information? > >DNS and whois are not the same. They'll get along fine. You can access whois from WWA just fine. I did it last night after this thread got started. Jamie
Re: WWA bought by spammers!
Author: Eric A. Mathiasen
Date: Thu, 17 Sep 1998 00:00
Date: Thu, 17 Sep 1998 00:00
11 lines
1270 bytes
1270 bytes
In wwa.general Jamie E. Eimermann <jee@news.wwa.com> wrote: : You can access whois from WWA just fine. I did it last night after : this thread got started. If the story were true, depending on how the "block" was implemented, WWA users could probably still access the whois database just fine, even if Verio had a machine doing mass accesses that was blocked. -Eric -- Eric A. Mathiasen | eric@mathiasen.com | www.mathiasen.com
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads