Project Honeypot – 1 Billion Spammers Served and more…

•December 18, 2009 • Leave a Comment

Project Honeypot published this nice article which contains all kind of data and graphics here:
1 Billion Spammers Served

All nice and shiny, but I have a problem with this graphic:
Most phished brands
Notice that PayPal is about 1% …

Our data, gathered by the URLCheck service, gives us completely different numbers:

So, don’t believe everything what you see…

Confiker again in the news – @Shadowserver:EU is bigger than you think guys

•December 18, 2009 • Leave a Comment

I have to confess, I never ever read anything on www.shadowserver.org and everything I write here is taken from this page from McAfee Avert Labs Blog

Shadowserver names 183 country codes and 5994 autonomous systems with Conficker IP in their network space:

* 1086 for the Russian Federation (RU)
* 597 for the United States (US)
* 422 for Ukraine (UA)
* 271 for Romania (RO)
* 244 for Brazil (BR)
* 243 for Republic of Korea (KR)
* 184 for Poland (PL)
* 166 for Bulgaria (BG)
* 147 for Europe (EU)
* 129 for Indonesia (ID)
* 113 for Japan (JP)
* 95 for China (CN)
* 94 for India (IN)

I can not stop myself to notice a very stupid mistake created by ignorance.
If you look at the above quotation you see:
* 271 for Romania (RO)
* 184 for Poland (PL)
* 166 for Bulgaria (BG)
* 147 for Europe (EU)


Well, useless to say… I hope … that the 3 countries are already part of the European Union.
Have a look here: http://europa.eu/abc/european_countries/index_en.htm

Avira Techblog article: Not every Christmas card wishes you well

•December 4, 2009 • Leave a Comment

Avira switches to new update system

•December 2, 2009 • Leave a Comment

Avira switches to new update system:
http://techblog.avira.com/2009/11/19/avira-switches-to-new-update-system/en/

… but only for a short period of time.

Get 2 GB of Free Online Storage

•November 19, 2009 • Leave a Comment

About the APR’s Memory pools which seem to cause memory leaks

•November 19, 2009 • 1 Comment

Resources:

http://en.wikipedia.org/wiki/Apache_Portable_Runtime

http://en.wikipedia.org/wiki/Memory_pool

http://dev.ariel-networks.com/apr/apr-tutorial/html/apr-tutorial-3.html

http://svnbook.red-bean.com/en/1.1/ch08s05.html

The APR pools are some big tables which contain references to consecutive
memory areas which are used by the application. Once the application releases
such an area, the pool marks the memory area as available, but it doesn’t give
it back to the OS.

Let’s take an example which better illustrates this situation:
We have 100 memory areas in the pool, each of 10 K RAM . Some of them are used,
some of them not.
10 consecutive objects are released, so we have a block of 100K of continuous
memory (in the pool and in the RAM).
If there comes a request to reserve 80K of RAM, a big part of this block will
be used (8 out of 10 areas). This is reutilization of the pool and from the
outside, there will be no memory increase seen.

But, if there comes a request to allocate 200K of RAM, the pool doesn’t have
enough consecutive areas to allocate 20 blocks of 10K RAM so, it has to
allocate 20 new blocks of 10 K. This means from outside, that the pool has been
enlarged and this amount of RAM will NOT be released until the end of the
program or until the application decides to flush the pool.

Some time later, if the application requests 80K of RAM, the old 10 Blocks will
be used, but at this moment, the pool has been enlarged.
AFAIK, there is no limit until which size can such a pool grow.
I’ll check this…

New Avira Techblog article: Social engineering and the redefinition of spam

•November 18, 2009 • Leave a Comment

mustaca.ro is finally alive

•November 5, 2009 • Leave a Comment

I own mustaca.ro since a couple of years now… maybe 6 years ?
However, I didn’t use it so far because I couldn’t register a DNS record for it.
Now, with the help of my friends I was able to redirect it to mustaca.de

Also the emails sent to mustaca.ro are redirected to mustaca.de

P vs NP

•November 4, 2009 • Leave a Comment

Read here the entire article on DDJ.com: http://www.ddj.com/architect/221600058

I love this remark:
“NP-completeness “tells you something very specific:It tells you that if you’re going to look for an algorithm that’s going to work in every case and give you the best solution, you’re doomed: don’t even try. That’s useful information.”

New article in the Avira Techblog: The spam trend continues: more and more malware

•November 4, 2009 • Leave a Comment