About Us Advertise Archives Feedback Privacy Statement
SUBSCRIBE FOR FREE!

If you do not currently receive LSM you can easily do so totally free of charge by clicking the 'subscribe' button and entering your email details on the following page.


Welcome
Author – Liz Thomson
Editor – Jonathan Burnside

Welcome to Volume 4 Issue 2 of LSM! It’s been a busy week; we have had Valentine’s day, Chinese New Year and Shrove Tuesday. Now it is time to relax with LSM, get a cuppa, sit back and get ready to consume the information to come!

In our first article we look at the pitfalls of email delivery, explaining why sometimes your emails may not reach the recipient and how you can avoid your emails from going astray.

In our second article we explain how a trojan virus works. We have covered, in the past issues of LSM, how to avoid getting viruses, but we think it is important for you to realise why it is so necessary to be protected.

Hopefully these articles are informative to you. Don’t forget there are plenty of back issues to be had on many other subjects, you can find these by clicking on the archives button in the menu above.

Accept Finance - Car Finance & Personal Loans
Eastbourne Auction Rooms - bid online

Did You Get My Email? - The Pitfalls Of Email Delivery
by Dean Chafee

This is something that anyone with an email address these days, may hear or say quite often. Why? Well because of the relatively unreliable nature of email delivery systems.

Here is a comprehensive list of what your email message goes through in order to get delivered:

* Virus Checks - The majority of virus (and worms) these days, travel around the internet by way of email messages. In order to protect valuable network systems from being attacked by a virus, most corporate networks and Internet Service Providers employ virus scanners that look for viruses and worms in much the same way that anti virus scans on your desktop computer. Most email server are set up to delete or quarantine any message that tests positive for a virus.

* SPAM filters and the huge growth of SPAM - Everyone hates SPAM! So much so, that people will change their ISP providers or email host to get better protection from SPAM. As a result, companies like AOL and MSN spend tons of money coming up with new ways to provide "better" spam protection to their subscribers to reduce their attrition rates.


SPAM filtering methods:
  • Phrase filters - watch what you say! Many email servers use a list of unacceptable, or offensive word and phrase lists and will reject or place the message in a junk folder upon a match, so watch what you say, or your message could be rejected.
  • Connection Checks - poorly configured email servers can cause loss of messages. This is most likely out of your control (unless you are a server admin), but just be aware that when email servers talk to each other, some are very picky about allowing a connection and may reject it if the source server does not "check out" properly.
  • Statistical Analysis - this is used to catch some of the techniques used by spammers like many repeated words or a bunch of unrelated words stuffed in the message (usually to try to throw off the spam filters). Your message can become a victim of this if you do something like copy and paste a data file into the body of your message or if you were to insert a data file (like a mail list or spread sheet) into your message, as opposed to attaching the file.
  • Domain Black Lists - Your ISP does not like your friend's ISP! - server administrators will use a list of trusted (and sometimes not-so-trusted) domain and/or IP address lists to filter incoming messages. If you happen to be using one of the "bad" service providers, your messages could be dropped. Watch the company you keep!
  • HTML code checking and filtering - Don't get too fancy with your Html email messages. Many servers are set up to reject messages that contain certain html code. Especially scripts, deceptive URLs or encoded text.
  • Discretionary Blocking by email address, domain, or IP block. - Most email server give the admin the power to place a block in their server to deny access to any server or domain of their choosing.
  • Server Rule Sets - in addition to all of the above obstacles, most email servers can be custom configured with rules that will redirect or delete messages on just about any content that you can think of! A incorrectly coded rule could create a virtual sink hole for messages.

Now, assuming your message gets through all of the above checks, the next pitfall is in the email client program, like Outlook.

*Email Client Rules and Filters - Just like servers can have rule sets that redirect or delete messages, most email client software also has the ability to create custom rules to delete or move messages into a folder. Again, an improperly coded rule could create a black hole for your message.

* Unsolicited Message Filters, or Junk Filters - Most email client software also provides some sort of Junk mail filter, like Outlooks Junk E-Mail filter and add-on filters like SpamAssassin. These filters have become quite reliable, but there is still a small percentage of False Positives that will occur. Your message could fall victim to one of those false positives.
Other pitfalls:

* Standards not adhered to - Although there are sets of standards (RFCs) that software providers and administrators of server are supposed to abide to, the standards are many times loosely adhered to. In fact most email server software gives the admin the option to turn on or off specific RFC features at their will or desire.

* False Positives - virus and spam filters. - Every content filtering technology has a certain percentage of False Positives that are considered acceptable.

* Proprietary Systems - There are many home grown systems out there that are simply poorly written and do not conform to standards.

* The Wild Wild West... everyone configures their systems based on their view, morals and opinions.

* Quotas - Sorry, that mailbox is full - Many service providers will limit the size of your inbox. The reasons for this are obvious... storage costs money.

* Daily Delivery... no so much! - Just because your message got through today, does not mean it will make it tomorrow. Content and virus filters are often updated daily. Also, the little geek behind the server administrators console may decide to add an additional filter or click on a new feature just to try it out (I know, I've done it)... again, it's the Wild Wild West.

So, how can I Fix this? What can I do?

* Mostly, be aware of this.

* Request a "Delivery Receipt". Most email clients support this, however, most email clients also provide the option to ignore them when received. Still, it does not hurt to ask!

* Request a confirmation. Ask the recipient of the message to reply back to you with confirmation that they received it. This is probably the most reliable method of making sure the message was received.

* Assume Nothing - never simply assume that the message was received. You know what assuming does... It makes an ass out of you and me!

* Follow up. If the message is critical, follow up with a phone call, or with an additional email requesting a confirmation.

The result and my recommendation:
Email is a great and very convenient for daily communications, but just be aware of the pitfalls and do not over rely on email for critical communications. And please... Don't send your critical business files via email. FTP or burn on CD and send overnight.

Dean Chafee, owner and creator of http://www.HowToFixYourStuff.com. A community of People Helping People Fix Stuff.
Dean is also a contributing expert at Experts-Exchange: http://www.experts-exchange.com/M_3706695.html
Web Design by Professionals

How A Trojan Virus Works
by Dee Generate

It is an astonishing statistic that seven out of every ten computer users do not know what a ‘Trojan Horse’ virus is or what it can actually do once it has compromised their computers. If you are one of these seven people then please read on because you really need to understand exactly what can happen to you, your computer and the other computers that you communicate with.

For the most part I would at least assume that your computer is Fire-walled. A decent firewall program is ultimately your first line of defence against a potential 'attack'. Without one you are literally putting yourself in the firing line without any weapons or armour to protect yourself. Effectively you are a sitting Duck!.

A Trojan is small. A very small program 'The Back Orifice' Trojan Virus is in fact only 124Kbytes in size. The Trojan program consists of three parts and taking the example of the most advanced and the most popular of all, the Trojan Horse programs, Sub 7 (Alias Back-door G), these are namely; Server.exe, EditServer.exe and sub-seven.exe. Once the sender of the Trojan has compromised his or her victims system then the fun can really begin for the 'Hacker'.

So what can our friendly or malicious hacker do to our computers once he has compromised it? Anything he damn well pleases is the simple honest truth. Just for starters the hacker will be informed when his victim logs on to the Internet. He will then open up one of the three afore-mentioned files, which is his 'Client'. The Client opens up a very informative window on the hacker’s computer. Here he has a whole host of options open for him and at the touch of a mouse button he can either just 'open' and 'Close' your CD/DVD Tray or he can totally wipe everything from your hard drive. I guess it all depends on what type of mood he got up in that morning! That’s how delicate a position you are in once your system is compromised.

Okay so let us assume that your computer is indeed infected with The Sub7 Trojan. What else can the attacker do? Well, he can actually 'see you' through a connected camera, he can see a picture of the current screen and/or see an overview of what programs are currently in use. The attacker can change the screen features, windows colours, start and end programs, take over the control of your mouse and a whole host of other options. He will already have had access to all your passwords, your contacts in your address book and email addresses of all your contacts etc...He will know everything about you. There is also one more very important consideration to take into account, no amount of encryption, i.e., those used by online Banking institutes can prevent the hacker gaining access to your Bank account. If you perform online banking then he will know what bank you are using because he can see your window. Now he waits for you to type in your password for the site, he now has that via the key logger that is installed in the Trojan, and by watching what you type on your keyboard. Thirdly he awaits for you to log in to your account and 'BINGO'!, he now has your account number, sort code, credit card numbers and all of your banking details and once you log out the hacker can proceed to log into your bank account and carry out his dirty work i.e. steal your hard earned money.

Are you now beginning to appreciate the seriousness of the situation? The attacker can potentially not only destroy your computer, but he can quite effectively and quite easily destroy your whole life.
"Oh" and by the way, once the hacker has got control of your computer he can use your computer to launch other attacks from. He can use it for other illegal activities and should he do so then I'm afraid it is YOU who takes the wrap. Yes that’s right, you! It is ultimately down to you, as the owner that is solely responsible for its safety and security. No "ifs" or "buts" and no amount of pleading innocence or ignorance will prevent you from being prosecuted or even sent to prison, should your computer be involved in any form of illegal activity!

As with most things in life, 'prevention' is better than 'cure'. Firewall your system to block all the vulnerable ports. Perform regular Virus scans with a good Anti-Virus program and always, always, scan anything and everything that you download from the Internet with this Anti-Virus program before you proceed to open it.
(c) 2007, Lottbridge Systems Ltd
Vol 4, Issue 2: Thursday 22nd February 2007.