Please visit the LangaList Home Page


How To Subscribe and Unsubscribe is at the end of this note. Mailing List Trouble? See http://www.langa.com/help.htm
Questions about the advertisers? See the end of this note. Please also see legal notices at the end of this note. LangaList: ISSN 1533-1156

Please recommend the LangaList to a friend! (And maybe win a prize!)

An easier-to read formatted HTML version of this newsletter is available
<a href=" http://www.langa.com/newsletters/2003/2003-09-18.htm ">here</a>

The LangaList
Standard Edition

2003-09-18

A Free Email Newsletter from Fred Langa
That Helps You Get More From Your Hardware, 
Software, and Time Online

Please visit our sponsors and help keep the LangaList S.E. free!

Contents:

1) Auto-Reply Horror Stories
2) "NDR Spam"
3) Solid, Basic Info
4) More Scumware?
5) Letter From Faisal's Mother
6) Recommend This Newsletter And Win!
7) Can't Patch Due To Slow Modem
8) Three Thousand And Counting!
9) Stolen PC/Laptop Problems
10) Just For Grins
11) Plus! Edition Highlights:
      Make Your Email Address Scoop Proof!

 

 

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

Brand Name PCs with and without Operating Systems starting at $99.99

<a href= " http://www.langa.com/sponsors/dartek.htm ">Click!</a>

--------------( the above is an advertisement )--------------

1) Auto-Reply Horror Stories

They're starting to come in--- emails from readers recounting some of the messes caused by out-of-control auto-replies. Here's just one example:

Fred -  On the Berry College campus, we had a little auto-response problem last year. One of our teachers went on vacation, so she set up an auto-reply to anyone who sent her a message. Just before doing this, she contacted the campus help desk about some problem she was having; her service request was entered into the Remedy database. Remedy generated an automatic email telling her that her service request was entered - and of course, her "away" message went back to the Remedy database. When the email arrived, Remedy sent an email back to her telling her that she didn't need to send email to that particular address, because it's automated and humans don't actually check the account....and of course, this caused the teacher's email account to generate another "away" message back to the Remedy database. This back-and-forth continued until about 200 MB were left on the email server's drives. The network services department spent quite a while deleting all those emails from her account - many thousands of them, in fact.  ---Chris Lewis

Wow! 200 MB of bogus reply messages from just one user is a lot, but at least that was local, within your own mail system. Imagine if it had been standard internet email. Imagine if it had been on someone's slow dial up account! 8-)

While there's a lot of email like the above, I'm also getting some email from people who feel that auto-replies are absolutely essential. For example, they ask: How else will you know if an email you sent never made it to its destination?

But consider this: Email isn't unique. Some percentage of paper mail gets lost or misdelivered all the time, and has done so since the advent of postal services, yet we all somehow manage to cope: You simply resend the mail with a "return receipt" requested, or pick up the phone, or send a fax, or try something else.

Same with important email. You can resend with a "return receipt," or you can pick up the phone, send a fax, or try another means of contact.

It seems silly to me to allow all the very real problems that unbridled auto-responses can cause--- like 200 MB of garbage "I'm away" notes from just one user--- to prevent a *possible* problem with the relatively small percentage of really important emails we send and get.

But what's your take? If you use an auto-responder, what do you do to prevent spammers from harvesting your email; to prevent looping; and to prevent worms and viruses from using your address? What other methods are there to help avoid the problems?

Click over to
http://www.informationweek.com/story/showArticle.jhtml?articleID=14700320
for the full story, for the fixes I suggest, and to join in the discussion!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

 "Fred, I , like so many computer geeks get in the habit of trying out different software (freeware and shareware) never planning to use it, but just trying it out so we will have a glimmer of an idea of what [someone] may be talking about. Computer, internet, service newsletters are the same, I have so many sent to me at my junk mail e-mail site, that I never more than browse them (if I don't automatically trash them). Then comes the dawning: 'I really am reading and *using* this particular newsletter or software.' I guess what I am really trying to say is Thanks... At this time I must sign up for the plus subscription (at my real e-mail acct). If we use it, we should pay for it....I and my clients thank you. Bob Javoroski"

Thanks, Bob. The Plus! edition is just 14 cents an issue--- $1 a month--- but that small amount is what keeps Langa.Com and this newsletter afloat.

Get all the details:
<a href=" http://www.langa.com/plus.htm ">Click!</a>

--------------( the above is an advertisement )--------------

2) "NDR Spam"

This gets a little geeky, but is important to at least know about (so you can recognize it if it happens to you or your mail); and is especially important for mail admins to know about, so they can take appropriate action.

It's a way that spammers can take advantage of one particular auto-reply generated by MS Exchange servers:

Fred, We've been affected lately by something called "NDR Spam," which I think your readers ought to know about. Basically, it can affect any companies that use MS Exchange 2000 or 2002 for their e-mail servers. Both of these versions of Exchange accept ALL messages sent via the SMTP protocol. If they can't be delivered to a legitimate e-mail address on that server, Exchange automatically generates a non-deliverable receipt (NDR). Some spammers have figured out how to leverage this. Because the sender can set any address as a reply-to address, they can fill in that field with the address to which they actually want to send the message. Thus, Exchange unwittingly becomes a "relay" for unwanted spam messages, even if relaying is turned off on the Exchange Server.

This doesn't sound like much of a problem, till you consider how Exchange delivers e-mail. Let's say your Exchange Server has received several hundred of these NDR spam messages in 1 day. In addition to handling the normal volume of incoming and outgoing legitimate e-mails, the Exchange Server must generate non-deliverable receipts for each of these NDR spam messages, which get queued to be sent out. Exchange will then try to deliver each of these bogus messages. If it fails, it then retries sending them at a number of different time intervals (ex 30 minutes later, 1 hour later, etc.). Exchange may try 5-6 times before giving up. All of this activity can eat up significant server resources. Thus, NDR spam is actually also a mild form of a denial of service attack, in some respects.

Here is an article that I found that explains this problem: http://www.mapilab.com/articles/ndr_spam_attack.html

To solve this problem, it appears that you have 2 choices Upgrade to Exchange 2003 Server, which does enable you to set up rules-based filtering of incoming messages, or use a 3rd party solution in "front" of your Exchange Server to do rules-based filtering, like MailWasher or Praetor.

I'm not an expert on this; my knowledge of this issue is based on what we have experienced here at AEM, and what our network consultant has told us about NDR spam. It's an insidious problem, and one that is undoubtedly affecting other LangaList readers!

Keep up the great work, Fred!  

Best Regards,

Chuck Frey,
Director of Strategic Information Services
, Association of Equipment Manufacturers

Thanks, Chuck!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

3) Solid, Basic Info

While the previous item was from the deep end of the pool, here's a lively resource that has useful info for readers of all skill levels:

Hi Fred, thanks for the newsletter. I wondered if you have come across the following excellent info site: http://aroundcny.com/technofile/net.html

Many thanks for sharing your information, Kind regards Robert Plumtree

Thanks, Robert! No, I hadn't seen that. It's an eclectic collection of tech reviews and commentaries covering hundreds of topics. The main entrance is at http://aroundcny.com/technofile/index.cfm ; the link Robert supplied is the archives, which go back about 6 years or so. Lots of good reading there!

Nice find!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

4) More Scumware?

Hi Fred: Have you ever heard of xtrocash.org? I have every popup preventer and spyware detector possible on my pc, but I cannot get rid of this outfit no matter what I do. When I open IE Explorer, my home page comes up and is immediately replaced by a page that says "We don't count bookmark visitors. Please report spammers here," with "here" as a link. The link takes me to an e-mail to xtrocash.org. I have repeatedly requested that they remove this page, to no avail. No spyware detector finds it; I can't find it in the directory, and I'm at my wit's end.

I googled xtrocash, and as far as I can tell, they have hijacked my pc with some sort of porn setup, so that people who want to click on a porn site can do so via my computer. They claim to pay money for me allowing them to use my pc, but given that I didn't sign up for anything, and they don't have my name or address, I think I'm being used without my permission.

Thanks, Darby Carswell

Xtrocash is an "adult" website sponsor that pays three cents per delivered click; a very high amount as these things go, which (it seems) has caused someone to try to stuff the link into your PC so they'll get three cents every time you get delivered to whatever adult site they're affiliated with. Thus, they're not using your PC to send others to the site, but are trying to collect a few pennies each time *YOU* visit the site. Presumably, they've infected many other PCs, too, hoping that the many separate clicks will add up to something for them.

Rooting out a problem like this depends on where the little nasty is located on your system. We've covered solutions to several forms of "browser hijacking" before, as shown here http://langa.com/u/1h.htm , or in this more general Google search http://www.google.com/search?q=browser+hijack

If that doesn't work:

1) Try the add/remove applet in control panel, in the off chance there's something listed there that's easily removable.

2) Run spybot, ad-aware, or pest patrol and see if they find anything. (You said you had anti-spyware tools, but no tool catches everything.)

3) Search the registry for any instance of "xtro" and delete any keys referencing the offending site.

4) Search your hard drive likewise; delete any "xtro" files and folders you find. Make sure you have Windows Explorer set to show you all files, including Hidden and System files; and to search in all locations.

5) Try something like startup control from http://www.mlin.net/ and see if you can locate (and later delete) anything related to the offending software.

6) Try the registry tools from jv16.org to repair/delete any broken registry items caused by the above removals.

7) If no dice, then roll your system back to a known-good state, using your backups or images.

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

Microsoft Is Stopping Win98 Support? Bone Up Now!
Need Answers about ANY version of Windows?

Check out computer-related books personally recommended
by Fred Langa and available at Amazon.Com's deepest discounts!

<a href=" http://www.langa.com/books.htm ">Click!</a>

--------------( the above is an advertisement )--------------

5) Letter From Faisal's Mother

Remember Faisal, from Indonesia? Last February, he became one of the children sponsored on an ongoing basis by LangaList Plus! subscribers (see http://www.langa.com/newsletters/2002/2002-09-19.htm#3 or click to see Faisal: http://www.freetune.com/images/faisal.jpg ) Among other things, our sponsorship helps fund Faisal's school.

Here's a note I just got from his mother. You can see the original version at http://www.freetune.com/images/faisal0309.jpg, or read the English translation below, provided by an aid worker in their village:

August 2nd, 2003

I am Yenni Dwi Hastuti, mother of Faisal Eko Budiyanto.

I am telling you that Faisal is doing well and we hope you are fine and happy too.

Faisal is following the play group activity in his new kindergarten. He is so happy to meet his new friends. He likes playing swing and glide; he also enjoy hearing the story from his teacher from the project. He got many programs that will helpful for his growth, so he become more lovely, smarter and healthier. That's all. We'll write again next time.

Love,
Yenni Dwi Hastuti, mother of Faisal Eko Budiyanto.

Here's what this is all about: Those of us with computers and Internet access are vastly better off than most of the world's population. Because of this, I decided that a portion of the LangaList Plus! subscription fees would be donated to registered/legitimate charities helping the underprivileged around the world. The contribution does not increase the cost of a Plus! subscription in any way; the donation is taken "off the top" of any profits. (This is described in the pages at http://www.langa.com/plus.htm  )

Faisal is one of nine children sponsored on an ongoing basis--- week in, week out--- by the collective generosity of LangaList subscribers. LangaList Plus! subscribers also have collectively contributed to emergency earthquake relief efforts in India and to funds to help the victims of the Sept 11th attacks in the US. (To see all the donations so far, click to http://www.langa.com/plus2.htm#kids )

As time goes on, and as more readers sign up for Plus! subscriptions, I hope we'll be able to sponsor more children and assist other charities around the world.

Graham Greene once said, "There is always a moment in childhood when the door opens and lets the future in...." If you're already a LangaList Plus subscriber, thank you! You can feel good about giving back a little to those less fortunate, and opening "a door to the future" for a child in otherwise-desperate circumstances.

If you're not yet a Plus! subscriber check it out: With a Plus! subscription, you can not only help yourself make the most of your hardware, software and time online--- but you also can help those less fortunate (like Faisal) make the most of their very lives. Thanks for your help!

http://www.langa.com/plus.htm

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

6) Recommend This Newsletter And Win!

If you think the LangaList is a worthwhile read, maybe a friend would find it useful too! Just use the following link to recommend the LangaList---your friend may find a new source of useful information and you just may win one of three FREE ONE YEAR SUBSCRIPTIONS to the LangaList Plus! edition given each month. (If your name is drawn and you're already a Plus! subscriber, your current subscription will be extended by a full year.)

Check out the details at http://www.langa.com/recommend.htm . Thanks for recommending the LangaList--- and good luck!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

7) Can't Patch Due To Slow Modem

Our recent discussion of Windows Update generated mail from readers who can connect to the site just fine, but whose access is so slow that the updates take an unreasonably long--- and sometimes expensive--- time to complete. For example, this reader from South Africa writes:

Hi Fred. Something that bothers me which I hope you may be able to give some advice on is the question of patches. I am using Win 98 SR2 and I must admit that I am one of those people who have not patched my OS at all. The same also applies to Internet Explorer of which I am using version 5.1. The reason for this is that I have a very slow dialup Internet connection via a 56k modem which downloads at between 0.5 - 2.5 kbs and the patches are very large files which take forever to download. The cost of our local Telkom calls to the ISP in South Africa are also expensive. So what can I do to get hold of the patches?

The above mentioned slow download speed is not ISP related as I have used four different ones and the speed does not vary that much. ISDN and ADSL connections are very expensive here and are not an option for the ordinary home user.

Luckily I have not had many problems with virus' s and none at all with worms. I use Grisoft's free AVG software which I keep up to date. Best Regards, Charlie Brook

You're not alone, Charlie. Many people living outside of metropolitan areas have no option but slow, and often expensive, long-distance dial-up connections.

There's no magic answer, but this might help: Don't live-install the patches; do a simple download first, and install the patches later, offline; and pool your downloads with others.

Taking those in reverse order: It's unlikely that you're the only person in your area facing download problems. If you can find any other users--- even one--- and pool your downloads, you can cut your connection time and costs substantially. It might be a friend, neighbor, or a formal users' group; but your download costs will be cut by however many users are in the download pool: Two people will each pay half of what they otherwise would; four people will each pay one-fourth of what they otherwise would; etc.

The trick is to download the update files ONCE, saving them to a PC for later sharing and re-use; rather than doing a live, online update for each machine in turn. You can do this with the information in "Saving Updates To Disk" http://www.langa.com/newsletters/2001/2001-12-17.htm#5  or "Save Your Updates Offline"  http://www.langa.com/newsletters/2003/2003-03-20.htm#2

For example, even if you have ONE friend in a similar situation, you can use the technique above to download the patches and save them on one of your PCs for later use by both of you. By splitting the cost of the phone call, you'll each end up spending only half what you otherwise would have had to. With four friends, the cost is one-fourth; with a user group with many members, the per-person cost can be truly trivial.

Saving the patches locally not only means you have them to share with others, but also means you'll have them in the future, should you need to re-patch!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

8) Three Thousand And Counting!

Yup, last week, we topped the 3,000 mark---  over three thousand of your fellow readers have "Loaded the code." Please click over to http://www.langa.com/code.htm , and maybe you can join them! (If you've already "Loaded The Code" and are wondering if your site will appear here or on the Langa.Com web site, please see http://www.langa.com/link.txt )

Speaking of which: Here's another eclectic sample of reader sites--- some professional, some very personal:

View A Randomly-Chosen Reader Site
http://www.langa.com/randomlink.htm

Manually Browse All Posted-to-Date Sites Starting At
http://www.langa.com/readersites.htm

Automatic Wallpaper Changer
http://homepage.ntlworld.com/steve.murphy7/

Family Tree Net
http://www.myfamilytreenet.com/

Pop's Attic
http://www.popsattic.com/

Pragmatix Communication
http://www.pragmatixcommunication.co.uk.tt/

Gregory Kowalsky, NDTP
http://mywebpages.comcast.net/supportstation/gimmel.gal/index.html

Crabtree Family
http://www.rgcrabtree.com/

Jerry Built (Woodworking)
http://www.jerrybuilt.com/

Barb13203
http://barb13203.tripod.com/

CawsandJaws
http://www.cawsnjaws.com/

Florida Shots
http://www.uszanders.com/

Chef Burns
http://www.sail.to/tmbchef

North to Alaska
http://www.north-to-alaska.net

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

CyberGuys!

Your LOW COST, Nationwide Computer Accessory & Supply Source!
Check out the great deals now:

<a href=" http://www.langa.com/sponsors/cyberguys.htm ">Click here!</a>

--------------( the above is an advertisement )--------------

9) Stolen PC/Laptop Problems

Here's a real nightmare come true:

Fred, I came to work today and realized that last night someone broke into our offices and stole my laptop. As I am evaluating the vulnerabilities, I have a question perhaps you could help me with.

The laptop was running Windows 2000 Professional and I keep it constantly updated with all critical releases from Microsoft.

The login screen is password protected with an 8 character non-word that means something to me.

At this point I don't know enough about how this security works on the OS level. So here are my questions

1. Can the thief access my email account passwords?
2. Can the thief defeat the password and get into the computer?
3. If so, does he then have access to the actual password?

Thanks for any help on this. I am running around like a chicken with its head... well you get the idea. Yours, Bill Knepper

My condolences, Bill. What a hassle.

1. Can the thief access your email account passwords? If you had anything set to auto-remember the login/password info, then yes. Likewise, if you stored the account/password information somewhere on the system, then yes.

2. Can the thief defeat the password and get into the computer? Yes, easily, if that's what he wants to do (as opposed to wiping the drive and selling the laptop to make a few quick bucks). See http://www.informationweek.com/story/showArticle.jhtml?articleID=13100343 for information on password bypass and cracking.

3. Does he then have access to the actual password? It's moot: With a password crack tool, he doesn't have to know the current password at all to get in.

Laptops are especially vulnerable to theft, but any computer can be stolen. BIOS-locking (where you set your BIOS to ask for a password at power-on) is a good protection, as it makes a PC very hard to boot without replacing the BIOS or performing otherwise nontrivial hacking.

This is also one of the reasons why I've always personally favored IBM laptops. Not only to they offer BIOS locking, but they also lock the hard drive: It takes two separate hardware-level passwords before the system will fully start; that is, before the OS-level security even begins to work. I like that a lot.

There's more you can do to protect your laptop or PC: See the last few tips in
http://www.informationweek.com/story/showArticle.jhtml?articleID=6503586 for ways to make laptops--- or any PCs--- safer from theft.

As a final note: This also shows one important reason why I recommend storing your backup data WELL AWAY from the PC or laptop, say on CDs that you keep offsite or in another location. All in-the-box data storage solutions (putting your backups on a second partition or hard drive, RAID arrays, etc) are useless to you when the entire PC or laptop goes out the door or is destroyed. In those cases, you lose not only your hardware, but also all your data and backups.

But, if you store your data FAR AWAY from the PC or laptop, you'll still have your files (the most important part of your setup) even if the hardware is stolen or destroyed in a fire or other calamity!

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

10) Just For Grins

Last issue's item on "Col. Frank Langa" and the Nigerian email scam brought this curious item:

Apropos the "Just for Grins" in your most recent newsletter, you'll also find http://www.ebolamonkeyman.com/  to be a hoot. The title says it all "Ebola Monkey Man P*ssing off Nigerian Scammers One At a Time." Enjoy! --- Celia

Wow! The site's a little harsh and may offend some, but I have to agree with the site's basic premise: These people are malicious scammers, not innocent victims. Toying with them, and thus wasting their time and energy, may actually do some good. And it can be amusing, in a mildly sinister kind of way. <g>

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

--- ( Your Clicks On Ad Links Help Keep The LangaList S.E. Free! ) ---

 Free tech support! Free shipping!
Limited lifetime warranty! Compatibility guarantee!

"Dear Fred:  As a subscriber of yours I have to say that your comments about Crucial are not enough. I have Crucial memory in all my computers and they are just the greatest company and the very best place to purchase memory. Their tech dept. even clued me in to a go around to install 768 MB RAM in Win 98 SE which normally does not like over 512, but the go-around works. They are the greatest!--- Marsh Pomroy"

<a href=" http://www.langa.com/sponsors/crucial.htm ">Click!</a>

--------------( the above is an advertisement )--------------

11) Plus! Edition Highlights:
Make Your Email Address Scoop-Proof!

  • Spider-Stoppers; Harvester-Foilers Pt 1
      (protect your address from spammers with these cut-and-past scripts)
  • Spider-Stoppers; Harvester-Foilers Pt 2
      (more tools to hide your address from spammers)
  • Spider-Stoppers; Harvester-Foilers Pt 3
      (other resources for making your address scoop-proof!)

The Plus! edition is only pennies per issue, and comes with a MONEY BACK
GUARANTEE from Fred. How can you lose? Check out the details:
http://www.langa.com/plus.htm

Click to email this item to a friend
http://www.langa.com/sendit2.htm

return to top of page

(Want to give a gift subscription to the LangaList Plus edition?
Click <a href= " http://www.langa.com/plus_gift.htm ">here</a>)

See you next issue!

Best,

Fred
( Editor@Langa.Com )


Please recommend the LangaList to a friend! (And maybe win a prize!)

An easier-to read formatted HTML version is available in the "Current Issue" section of http://www.langa.com.  (The HTML version of each issue normally is available by 9AM EST [UT-5] of the issue date.) All past LangaList issues are also available at the Langa.Com site.

return to top of page


Administrivia:

UNSUBSCRIBE: From the same email account you used to sign up with), send an email to
unsubscribe-langalist@lyris.dundee.net

SUBSCRIBE (it's free!): Create and send a new email to
subscribe-langalist@lyris.dundee.net

CHANGE ADDRESS? LIST TROUBLE? HAVE QUESTIONS? OTHER PROBLEM? NEED HELP? See http://www.langa.com/help.htm

This newsletter is SPAM PROOF and requires two levels of subscriber confirmation before delivery begins: See http://www.langa.com/info.htm

About the advertisers: http://www.langa.com/privacy.htm#ads

Disclaimer: http://www.langa.com/legal.htm  In brief: All information herein is offered as-is and without warranty of any kind. Neither Langa Consulting LLC, nor its employees nor contributors are responsible for any loss, injury, or damage, direct or consequential, resulting from your choosing to use any information presented here.

This newsletter is a service of Langa Consulting LLC and is Copyright © 2003 Fred Langa / Langa Consulting LLC. All worldwide rights reserved. LangaList: ISSN 1533-1156

return to top of page


Please visit the LangaList Home Page