Welcome to MSDN Blogs Sign in | Join | Help

Terry Zink's Anti-malware Blog

Protecting your mail from the scum of the internet

December 2007 - Posts

End-of-year wrap-up
Well, here we are on New Year's Eve.  I'd like to reflect a bit on this blog about the past year: I succeeded in my goal of learning Unix better.  This, as you may recall, was a New Year's resolution.  While I hardly consider myself an Read More...
Response to Trust-based messages
In my other post in a Q&A excerpt with Dave Crocker by Investor's Business Daily, I'd like to now respond to some of my selected quotes. Crocker: You have to create what I call a trust overlay to the existing e-mail system. Existing senders and receivers Read More...
Some early stats on TMA
We finally got around to deploying all of our new features from our latest release.  As I explained a couple of months ago, I created a hybrid of SPF and SenderID in response to customer demand.  I called it TMA, or Terry's Message Authentication.  Read More...
Spam's new nemesis: Trust-based messages
The other day I was reading Investors Business Daily and came across an article whose title you see in the subject line of this blog post.  The article is a Q&A Dave Crocker of BrandenBurg InternetWorking.  If you're like me and too lazy Read More...
Classic Viagra spam
It's been a while since I processed the spam abuse inbox, but I came across the following spam message today. Usee \/ i a g r /\ Proo and all wmoen wiill be yorus. Etxend the qualtiy of yoour sxeual perfromance with Ge |\| eerik \/ i a g r /\. This takes Read More...
If perception is everything, then Gmail needs better filtering
Every now and again, I get spam delivered to my inbox from one of the leading webmail services.  AFAIK, there are the big 4: Gmail, Yahoo, Hotmail and AOL. The thing is that to my work email account where I get some of my mail (ie, I eat our own Read More...
Once again, I'm proven right about false positive lag time
I hate to brag (no, wait, I love to brag), but once again I have been proven right. One the problems with getting accurate statistics about false positives is that users quite regularly submit them late.  So, assume for the week of Dec 3 - Dec 10 Read More...
A rarity - I'm proven wrong!
The other day, I posted that the Christmas season is upon us and that there has not been a major correlation between an expected rise in Christmas spam and the actual spam that we are seeing on our networks. However, I believe that I have now seen such Read More...
The 12 days of Christmas spam song
Kudos to Symantec for coming up with this 12 Days of Christmas Spam song.  Very clever. It's going to be very tough to top this. Read More...
Numbers don't lie, but they can confuse (part 3)
As I was saying in my previous post, one of the interesting relationships I have discovered is that the better our virus filters perform, the more spam our end-users see in their inbox (and the less total mail we see on our network). Another very interesting Read More...
Numbers don't lie, but they can confuse (part 2)
As I was saying in my previous post, statistics, and correlation and scatter plots in particular, are excellent ways of verifying whether or not relationships within components of the spam filter are valid or if the theory is spurious. Now that I have Read More...
Numbers don't lie, but they can confuse (part 1)
One of things I do here at Microsoft is look at numbers.  I have a table of statistics that I look at, not every day, but certainly a few times per week.  It's a table of the daily number of messages we block, how many are blocked by content Read More...
Security risks in a powerful corporation
Last week, I was watching the season finale of the second season of Heroes.  It's not technically the season finale, but with the Hollywood writer's strike, they finished off the first part of the season until new episodes could be written. Anyhow, Read More...
It's December! Time for the spam season, right?
Ah, the holidays are upon us.  And, as we all know, 'tis the season for piles of spam! Or is it?  Last year, we saw a very large run up of spam heading into December, but in the month of December itself I saw nothing out of the ordinary.  Read More...
Behind the scenes (part 2) - Now I know how Homer felt
Following on from my previous post about who shot Mr. Burns, don't worry, I'm building to something.  Mr. Burns begins to do a lot of evil things, including blocking out the sun.  The Simpson family is in their house discussing this turn of Read More...
Behind the scenes (part 1) - now I know how Homer felt
Here at Microsoft, I am a Program Manager.  One of the projects that we are currently working on is slipping behind schedule (and it has barely even gotten started).  There are various components that have to be re-engineered and it's forcing Read More...
Page view tracker