SpamCop Glossary Archive

[turetzsr]

The catch is that an "HTML Anchor tag" is something much more specific ... a certain construct of a URL that drops one at the 'matching' spot "on a web page" ... as compared to being simply dropped at the web-page ....

<snip>

41986[/snapback]

...Interesting, W3C documentation seems to be a bit ambiguous, referring to both an HTML <a> element and an HTML <a> element that contains what it also calls a "fragment identifier" as an "anchor." I was referring to the former while (I think) Wazoo is referring to the latter. Shall I change it to something like "HTML 'a' tag?"

[Wazoo]

...Interesting, W3C documentation seems to be a bit ambiguous, referring to both an HTML <a> element and an HTML <a> element that contains what it also calls a "fragment identifier" as an "anchor." I was referring to the former while (I think) Wazoo is referring to the latter. Shall I change it to something like "HTML 'a' tag?"

41999[/snapback]

Per your reference, I'll pont to the line;

Authors may also create an A element that specifies no anchors, i.e., that doesn't specify href, name, or id. I agree, whoever wrote that up seems to flip-flop quite a bit. My reference is building web pages, where using an anchor means constructing a URL just so, then adding in the other element elsewhere for the target of that anchor in the specially crafted URL ....

At any rate, while bearing my head against the wall sometume last night, I did toss up a suggested bit on the Wiki ....

[dbiel]

<a name="NewsGroups"></a>Newsgroups

A newsgroup is a repository for messages posted from many users at different locations. Originally built upon Usenet (a distributed Internet discussion system); newsgroups were/are popular methods of maintaining discussions worldwide on specific subjects. Newsgroups do not have to be part of the Usenet environment, and many reside on single servers providing a place for discussion, feedback and customer support of individual applications and/or services.

Newsreader software is required to read newsgroups. Newsreaders are frequently bundled in email client applications.

Blogs have in many cases replaced newgroups due to their browser-based functionality.

Also see SpamCop Newsgroups for information on the predecessor to the SpamCopForum.

[dbiel]

New entry taken from the FAQ forum entry: How Do I Show Technical Details?

<a name="TechnicalDetails"></a>Technical Details

The logic the SpamCop parser uses as it finds the right reporting parties for your spam. This can be helpful for advanced users who want to double-check SpamCop's logic, or for new users who want to learn from SpamCop's example.

See the forum FAQ entry for additional information How Do I Show Technical Details?

[dbiel]

An attempt to consolidate the various posts on this entry:

<a name="SpamvertizedURL"></a>SpamvertizedURL

A URL/URI displayed within spam which directs one to a web page that contains advertizing content or serves as a redirect link for the benefit of the spammer.

The displayed URI may be misleading as it often times is part of an html link that actually takes one to a totally different URL.

Not all URL's contained in a spam message are SpamvertizedURL's. Many are simply the URL's belonging to innocent bystanders which the spammer is using without permission for his own selfish purposes. Phishing spams normally contain numerous URL's belonging to a innocent bystander(s) which are used to make the message seem legitimate .

[dbiel]

New entry suggestion

<a name="SMTPAUTH"></a>SMTP-AUTH

SMTP-AUTH extends SMTP (the Internet e-mail transmission protocol) to include an authentication step through which the client effectively logs in to the mail server during the process of sending mail. Servers which support SMTP-AUTH can usually be configured to require clients to use this extension, ensuring the true identity of the sender is known. SMTP-AUTH is defined in RFC 2554.

SMTP-AUTH is currently in the beta stage of developement for the SpamCop Email Service.

[dbiel]

New Entry Suggestion

<a name="NSP"></a>NSP

A network service provider (NSP) is a business or organization that sells bandwidth or network access by providing direct backbone access to the Internet and usually access to its network access points (NAPs). For such a reason, network service providers are sometimes referred to as backbone providers or internet providers.

An internet service provider (ISP) usually obtains their network access from NSP's and resells that access to consumers and other businesses.

[dbiel]

Since there has been no recent comments about the following entries, they will be added to the glossary, as is, unless there are some comments added in the next few days.

<a name="NSP"></a>NSP

A network service provider (NSP) is a business or organization that sells bandwidth or network access by providing direct backbone access to the Internet and usually access to its network access points (NAPs). For such a reason, network service providers are sometimes referred to as backbone providers or internet providers.

An internet service provider (ISP) usually obtains their network access from NSP's and resells that access to consumers and other businesses.

<a name="SMTPAUTH"></a>SMTP-AUTH

SMTP-AUTH extends SMTP (the Internet e-mail transmission protocol) to include an authentication step through which the client effectively logs in to the mail server during the process of sending mail. Servers which support SMTP-AUTH can usually be configured to require clients to use this extension, ensuring the true identity of the sender is known. SMTP-AUTH is defined in RFC 2554.

SMTP-AUTH is currently in the beta stage of developement for the SpamCop Email Service.

<a name="SpamvertizedURL"></a>SpamvertizedURL

A URL/URI displayed within spam which directs one to a web page that contains advertizing content or serves as a redirect link for the benefit of the spammer.

The displayed URI may be misleading as it often times is part of an html link that actually takes one to a totally different URL.

Not all URL's contained in a spam message are SpamvertizedURL's. Many are simply the URL's belonging to innocent bystanders which the spammer is using without permission for his own selfish purposes. Phishing spams normally contain numerous URL's belonging to a innocent bystander(s) which are used to make the message seem legitimate .

The DNSbl entry still needs additional work

[dbiel]

Wake up call - repeated - Help wanted

back on January 8th, Wazoo pointed out

The DNSbl entry needs a 'lot' of work.

Any takers? Could definately use some help on this one.

Also the following were merged into the main glossary and detail posts merged into the archive topic

NSP

SMTP-AUTH

SpamvertizedURL

[StevenUnderwood]

UUBE - Unwanted/Unsolicited Bounce Email

This phrase is seen in the reporting details for IP addresses. These "reports" are sent to uube[at]devnull.spamcop.net.

I believe, but can not confirm, that these are the bounces that are hitting the spamtraps. I believe this because I have also seen reports being sent to the IP Administrator with Subject lines being the same as those with the UUBE title.

[dbiel]

Converted above entry into glossary format:

<a name="UUBE"></a>UUBE

Unwanted/Unsolicited Bounce Email

This phrase is seen in the reporting details for IP addresses. These "reports" are sent to uube[at]devnull.spamcop.net.

These reports appear to be the result of bounces that are hitting the SpamCop spamtraps and appear to be used to develop statistics on the number of bounces hitting the spamtraps.

[dbiel]

New Entry

<a name="IMAP"></a>IMAP

Internet Message Access Protocol (IMAP) is one of the major email protocols along with SMTP and POP3 and belongs to the application layer of the Internet protocol suite.

It is one of the three (four, if you count forwarding) methods for retrieving messages from a SpamCop Email Account. The other two are POP3 and WebMail. You need a local email client to make use of IMAP. Unlike POP3 which will download all unread mail to your local email client, IMAP allows for direct access of your mail on the mail server permitting selective downloading of your messages and also allows for easy moving of messages between different email servers and accounts.

It can also be used in conjunction with the VER interface to make use of the additonal reporting options only available with an SpamCop Email Account.

[dbiel]

Wake up call - repeated - Help wanted

back on January 8th, Wazoo pointed out

The DNSbl entry needs a 'lot' of work.

Any takers? Could definately use some help on this one.

Also the following were merged into the main glossary and detail posts merged into the archive topic

IMAP

UUBE

[dbiel]

New entry:

<a name="ListWashing"></a>List Washing

Spammers use List Washing as a method of removing "trouble makers" (those who have filed formal complaints) from their mailing list. This generally does not include those who have simply sent an unsubscribe request. Spammers use unsubscribe requests as a means to validate their mailing list and to create additional lists of address that are know to open and read spam messages. These lists are considered extremely valuable to spammers who sell the list as validated email addresses.

Responsible list managers may use the process of list washing but the term should not be used in this context. List mantenance, merger/purge are better terms to use when talking about responsible list management where all unsubscribe requests are promptly processed and addresses are not added until they have been positively confirmed. The process can also be used to fine tune their lists for the specific needs or desires of their clients/subscribers.

[dbiel]

New entry:

<a name="POP3"></a>POP3

Post Office Protocol version 3 (POP3) is one of the major email protocols along with SMTP and IMAP, and belongs to the application layer of the Internet protocol suite.

It is one of the three (four, if you count forwarding) methods for retrieving messages from a SpamCop Email Account. The other two are IMAP and WebMail. You need a local email client to make use of POP3 which will download all unread mail to your local email client but does allow for the option of leaving a copy of the messages on the server.

[dbiel]

New entry:

<a name="HTML"></a>HTML

HyperText Markup Language (HTML) is the most common language of the World Wide Web (WWW). It can be used for formatting purposes in both the SpamCop Forums as well as the SpamCop Wiki, but its use has been limited due to abuses.

In the forums, it has been limited to use within the FAQ related forums only, and further limited to use by only thoses who have previous shown an interest and ability in working on expanding and/or improving the current SpamCop FAQ.

Note: the primary language for formatting within the SpamCop Forums is BB code, which is open to use by all registered users.

In the Wiki it can be used by any registered user but the language itself has been reduced to a "safe" set of commands.

[dbiel]

Wake up call - repeated - Help wanted

back on January 8th, Wazoo pointed out

The DNSbl entry needs a 'lot' of work.

Any takers? Could definately use some help on this one.

Also the following (due to a lack of comment) were merged into the main glossary and detail posts merged into the archive topic

List Washing

POP3

HTML

[dbiel]

New Entry

<a name="WebMail"></a>WebMail

SpamCop WebMail is an implementation of Horde IMP.

It is one of the three (four, if you count forwarding) methods for retrieving messages from a SpamCop Email Account. The other two are IMAP and POP3 which both require a local email client to use where WebMail uses a browser instead and provides full access to your SpamCop Email Account.

[dbiel]

Wake up call - repeated AGAIN - Help wanted - HELP WANTED!!!!!!!!!!

back on January 8th, Wazoo pointed out

The DNSbl entry needs a 'lot' of work.

Any takers? Could definately use some help on this one.

Also the following (due to a lack of comment) were merged into the main glossary and detail posts merged into the archive topic

WebMail

[dbiel]

New Entry

<a name="PSBL"></a>PSBL - Passive spam Block List

The Passive spam Block List, or PSBL, uses the Spamikaze software, which works in a really simple way. If one of related spamtraps receives email, the IP address it came from gets listed. After a certain time the IP address times out and is automatically dropped from the list. However, if the IP address belongs to a real mail server, most likely, one of the users of the mail server is going to notice the listing and will remove the mail server from the PSBL. It should be noted that anyone can remove any IP address at any time from this list making it the easiest list to get off of. PSBL also makes available the complete headers and email content of the spam it receives with only the spamtrap address being munged. SpamCop has found it necessary to stop making this information available.

The software is also available to anyone with the desire to set up a similar list at no cost.

Listing information is available at http://psbl.surriel.com/listing.

Please note that there is no relationship between the PSBL and the SpamCopBL other than their independent but common purpose in trying to stop spam from getting into in inboxes of users who have chosen to make use of their services.

New Entry

<a name="FormMail"></a>FormMail

Formmail.pl, one of the most-used perl scripts on the Web, is designed to send data entered into a Web form to an e-mail address. This scri_pt could be exploited by a malicious user who could use FormMail as a spam server. If you use this scri_pt, spammers may be able to use it to send spam freely using your server's resources.

A paper (long) explaining the FormMail vulnerability is available at http://www.city-fan.org/ftp/contrib/websrv...il-advisory.pdf

Note this is a January 2002 document referencing FormMail 1.9

Also see formmail vulnerability tester [at] http://www.monkeys.com/formmailer/ftest1a.html

Version: 1.92 - Released: April 21, 2002 see: http://www.scriptarchive.com/formmail.html

Also see The nms Project for current versions of FormMail

[dbiel]

New Entry - copied from Wiki page created by Wazoo

<a name="BBCode"></a>BBCode

BBCode is short for Bulletin Board Code. It is used as a way for formatting posts made on message boards, blogs and more. It is similar to HTML in the sense that in BBCode one does also use tags to format something specific (contained within the tag). In BBCode, tags are indicated by rectangular brackets surrounding a keyword, which is in turn transformed into HTML before being delivered to a web browser.

BBCode was implemented as method of providing a safer and easier way of allowing posts to be formatted on forums. Before BBCode, forums sometimes allowed users to include HTML code in their posts, which had many security issues (i.e. the user could execute java scri_pt code, break the layout of the site and so on). With BBCode being parsed by the forum scripts, it is easier to control what the user can do and can not do (allowing or not allowing specific BBCode tags).

The basic BBCode tags are often very similar across many different forums (which includes the SpamCopForum) but there are some variants in existence as well. Sometimes BBCode tags have to be in specific cases (i.e. [ b]bold text[ /b] will work, while [ B]bold text[ /B] will not). It is also very different as to which of the more unsafe and/or complex tags that are supported. For instance you cannot always expect the [ img] image tag to be supported as allowing posters unlimited power to post any picture they like could have some pretty nasty effects.

Source: http://www.bbcode.org/

Note: space added at the beginning of each BBCode tag to stop them from being rendered in this definition.

Note: in the SpamCopForum, BBCode tags are not case sensitive.

When writing or editing a post in the SpamCopForum, clicking on "BB Code Help" will open up a help screen that contains detailed examples.

[dbiel]

Wake up call - repeated AGAIN - Help wanted - HELP WANTED!!!!!!!!!!

back on January 8th, Wazoo pointed out

The DNSbl entry needs a 'lot' of work.

Any takers? Could definately use some help on this one.

Also the following (due to a lack of comment) were merged into the main glossary and detail posts merged into the archive topic

BBCode

FormMail

PSBL - Passive spam Block List

Also, please note that with the most recent additions, Part 1 of the glossary has exceeded its maximum allowed post size of 46,529 characters so a portion of Part 1 has been moved into Part 2 which was only at 35,081 characters at the time.

If you use "Check Post Length" you will notice that the maximum length is shown as 1,024,000 characters, but unfortunately that is an overstatement of the actual limit that appears to be 46,529 characters as anything beyond that point was being deleted when the edited post was sumitted. This limitation has been fixed in the next release of the Forum software which is currently in beta testing.

[dbiel]

Need some help translating the following found in Manual Report definition:

Newsgroup Posts that violate a Newsgroup Charter but have BI<20

What is meant by BI<20

Note: link is to original entry in the archive, but it does also appear in the current copy of all versions of the entry.

[Farelf]

What is meant by BI<20

That would be the Breidbart Index - http://www.stopspam.org/usenet/mmf/breidbart.html

[dbiel]

That would be the Breidbart Index - http://www.stopspam.org/usenet/mmf/breidbart.html

So how would one rewrite the entry so it makes sense (or am I just not understanding what it says?)

Newsgroup Posts that violate a Newsgroup Charter but have BI<20