Spam and Security Tip: Foil e-mail address harvesters

[SearchDomino.com]

Title: Spam and Security Tip

July 14, 2004 Published by  SearchDomino.com    Spam and Security Tip Issue Sponsored By:   > Sponsored by SearchDomino.com Product and Vendor Guide. IN THIS ISSUE:   >  Welcome to the first issue of our new Spam and Security Tip e-newsletter!   >  Cool password recovery tricks   >  Throwing eggs at spammers   >  Protect your Web site against e-mail address harvesters   >  Chapter Download: Would the real sender please stand up?   >  New Poll: Are you concerned with Domino platform security?   >  Tip Contest: Share you Notes/Domino know-how and win a prize! Welcome to the first issue of our new Spam and Security Tip e-newsletter! [Christine Polewarczyk, SearchDomino.com Editor] Introducing our newest offering -- the Spam and Security Tip. This monthly e-newsletter provides information on preventing and managing that ever-annoying phenomenon that we call spam, and offer hands-on advice on securing your servers, managing user passwords and IDs, implementing policies, and so forth. Essentially, it will explain how to handle spam and secure your infrastructure from internal and external security threats. Even though Domino is a lot more secure than Windows (ain't that an understatement!), there are still security issues related to your systems, as the recent report on Domino's cross-site scripting vulnerability attests. And, as we all know, employees are ultimately a greater security risk than any unknown hackers, Trojans or viruses. As for spam, no one escapes its wrath! But maybe we can help you put a leash on it. This is the first issue of our Spam and Security Tip. I hope you enjoy the three tips and other spam and security-related information below. If you would like to continue receiving this new e-newsletter, you must officially subscribe, which you can do using our easy one-click signup. All you have to do is click on this link, input your e-mail address and hit Enter. Simple as that. If you have any feedback on what you'd like to see discussed in this new monthly newsletter, please do not hesitate to send me your ideas.   Sponsored by SearchDomino.com Product and Vendor Guide. Whether you need Systems Integration, Security, or Storage solutions, you'll find it all in SearchDomino.com Product & Vendor Guide. Powered by KnowledgeStorm, this is the most comprehensive collection of solutions on the web. Go there now!   Cool password recovery tricks [Rob Axelrod] The process for having IDs sent to a repository is a bit finicky, and even small misconfigurations on the registration box will cause copies of the IDs not to be sent to the ID repository as defined in the certificate's recovery info. Here are a few valuable tricks that you can use to collect them. Throwing eggs at spammers [Garry Kranz] Spam messages account for roughly half of Novant's 45,000 daily e-mail messages. The spam includes the usual pitches for Viagra, pornography and low-interest mortgage rates. IronMail diverts about 20,000 messages a day at Novant's e-mail gateway. The challenge is making sure that legitimate messages aren't inadvertently tossed out in the process. Protect your Web site against e-mail address harvesters [Jens Bruntt] Web sites that offer contact e-mail addresses for the site's users also inadvertently expose the company employees to unwanted e-mail, or spam. Here's one way of taking care of the problem using Domino. TECHNICAL ADVICE:  Chapter Download: Would the real sender please stand up? This chapter from the book Canning Spam: You've Got Mail (That You Don't Want), by Jeremy Poteet, describes some simple techniques attackers can use to impersonate other users or mask their identities, and how you can detect these spoofs. In addition, you'll learn about some of the problems that can crop up when you use certain common techniques to combat e-mail impersonation. For some people, the cure can be worse than the disease. This chapter covers ways you can deal with this problem in a fashion appropriate for your e-mail usage patterns. MEMBER POLL:  New Poll: Are you concerned with Domino platform security? Following the recent discovery of two new Notes/Domino vulnerabilities, are you more concerned about the platform's security? Cast your vote in our new poll! PREVIOUS POLL RESULTS: In our last poll, we asked about your WebSphere implementation plans (if any). Here's what you and your peers told us. CONTEST:  Tip Contest: Share you Notes/Domino know-how and win a prize! How much do you know about Notes/Domino? Share you best tips, tricks, timesavers, code or advice and you could win a cool prize -- an iRiver Flash MP3 player with FM tuner and voice recorder. Don't be shy. Share your knowledge today for a chance to win! Submit your tip here. Check out the prize.   Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED]   This e-newsletter is published by SearchDomino.com, a targeted Web site from TechTarget, the most targeted IT media and events company. To unsubscribe from "Spam and Security Tip": Go to unsubscribe: http://searchtechtarget.techtarget.com/unsubscribe?track=NL-47&ad=486903 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchDomino Member Services 117 Kendrick Street, Suite 800 Needham, MA 02494