Re: [gnso-ff-pdp-may08] I believe I've figured out a solution to the FF problem

["Mike O'Connor" <mike@xxxxxxxxxx>]

dear all,

we're starting to build an "Individual Statements" annex.  this would 
fit fine in there.
Marika has suggested that once we've got all the 
individual-statements compiled, we might encourage others to co-sign 
them if they agree.  statements that attract overwhelming numbers of 
co-signers could then be considered for inclusion in the main 
report.  i love that idea.
so Marc, by all means write this up as an individual statement and 
submit it to Marika.
mikey

At 07:17 AM 9/17/2008, Marc Perkel wrote:

> I'm managed indirectly to get a hold of (indirectly) the ZONE data 
> for several TLDs. Actually what I'm getting is a list of new zones 
> added and compiled in a way that the listings are domains under 5 
> days old. I'm using this list to hunt for links within bot net spam 
> that point to these new domains. I'm now generating lists of domains 
> that are definitely used for spam and probably pointing to FF used 
> for fraud. But I don't yet have the information I need to detect FF.
> Even with what little data I have this is working. And it would have 
> 0 impact on free speech. (Unless the free speech were being 
> advertised using botnet spam). I'm going to write a detailed 
> explanation of how to do it. This will be the link.
> http://wiki.junkemailfilter.com/index.php/Fast_Flux
>
> There's nothing there yet. But I'd appreciate it if this link could 
> be included in the report and labeled as an opinion of one of the 
> group members for further exploration.
> Thoughts?
>
>
> No virus found in this incoming message.
> Checked by AVG - http://www.avg.com
> Version: 8.0.169 / Virus Database: 270.6.21/1674 - Release Date: 
> 9/16/2008 8:15 AM