Saturday, September 15, 2007

A brief history of ICT in Thailand

A former director of Nectec and NITC secretary-general looks back at four decades of computerization

STORY BY HUGH THAWEESAK KOANANTAKOOL

When Tony Waltham asked me to write about the development of IT in Thailand for the 20th anniversary of the Database section of the Bangkok Post, I thought that this is not an easy job. It reminds me of William Blake's poem:

To see a world in a grain of sand

And a heaven in a wild flower

Hold infinity in the palm of your hand

And eternity in an hour

We will look back to see what were the major milestones of IT development in Thailand, when and who were the key players in those events. We will see this "eternity" in small sections.

Where are we now?

Thailand has never been late in adopting new technologies. In 1968, we adopted the German PAL colour television three years before the introduction of colour TV broadcasts in the UK. Today, Thailand has all kinds of mobile phone standards: GSM, CDMA, PHS. In addition, cell phone operators have already introduced "2.5G" services (GPRS, EDGE, CDMA 1X EV-DO), meaning that you can use the phone to use Internet faster, as a stop gap before moving to the third-generation (3G) mobile services.

There are plans to introduce 3G services, but that depends a lot on the licensing scheme to be announced by the telecommunications regulator, the NTC (National Telecommunications Commission).

We've never been early enough in regulating for the good standards for telecommunications and broadcasting.

On the computer side of ICT, the story is a bit different from the television and the telephone. In making the computer able to handle the Thai language, we require local national standards and resources. This is certainly slower than adopting TV and telephone because television and telephones are the same for every language - computers aren't. Computers must be "localised" into the local language before you can write and read in that language. We can see that using the Thai-language on computers is quite easy and straight-forward. To come this far, it is worth taking a look at the story, which covers over four decades of computerization in Thailand.

The Thai language and computers

The Hercules graphic card

In 1967, we had only a few computers in Thailand. They were very expensive, large and could handle the English language using only capital letters. To make the computer work in Thai, we had to spend millions of baht for mainframe computer companies to customise their programs and printers to handle the Thai language.

By the year 1972, there were at least four big computer companies (IBM, Univac, Control Data and Wang) that sold computers with basic Thai-language input and printing. We started to see some rudimentary implementation of Thai display terminals during the years 1976 to 1979. The terminals displayed only 8 lines of Thai text per screen.

Around 1979, I was working on a version of Thai graphics display on a Z-80 home-brew machine using the CP/M operating system and it was successful. I used that machine, together with a home-adapted Selectric typewriter, to edit and print my PhD thesis in the UK.

When I came back to Thailand in 1980, I met Asst Prof Yuen Poovorawan of Kasetsart University to learn that he and his team had been active in developing important software for use with microcomputers in Thailand since 1978. That was well before the popularity of the Apple II and the IBM PC.

Microcomputer graphics and simple electronics design came into the hands of researchers and developers. In 1982, Van Suwannukul, a Thai friend who was studying in the USA under the King's scholarship, developed the "Hercules Graphic Card" (HGC) for the IBM PC. It was a low-cost implementation of the display adapter that handles both text (80 columns by 25 lines) and monochrome graphics (720 x 384 pixels).

The display card was an overnight success in the world market. A year later, a Thai engineer named Pratheep added some electronic circuits on the HGC to create the world's first 25-line Thai display. In 1984, several Thai display cards came into the market and this marked the first time in Thailand we could enjoy a full-screen Thai display.

The Thai computer market was vibrant in 1984. More than 20 kinds of Thai language implementations were available on microcomputers: CP/M, DOS-86, MS-DOS (IBM-PC and compatibles) and Apple II computers. A number of people from the academia, including myself, Asst Prof Yuen, representatives from computer companies including IBM Thailand approached the Thai government for one standard code of Thai character set. We managed to convince the TISI (Thai Industrial Standards Institute) to set up a technical committee on IT (TC536) to develop the standard. In 1986, the first standard computer code for the Thai character set was announced in the Royal Gazette as the TIS 620-2529 standard. The number 2529 is the year 1986 expressed in Buddhist Era.

There were many other key persons who took part in Thai IT standards development. Dr Udom Warotesikhadit, Dr Vichit Lorjirachoonhakul, and Dr Kanchit Malaivongs chaired the TC 536 in succession.

TC536 members included Dr Suriyan Tisyathikom, Mr Chamnong Thongprasert, and Mr Boonklee Plangsiri and the committee issued several standards covering many aspects of Thai language processing, such as the code translation for Telex, standard keyboard layout, and a recommendation on Thai Combined Character Codes and Symbols for Line Graphics for Dot-Matrix Printers. I chaired one subcommittee of TISI/TC-536 on the development of the Thai input/output standard. The standard was published in 1998 as TISI 1566-2541.

Through those standards, the people behind the scenes such as TC-536 eliminated all known headaches for computer users in Thailand. Subsequently, Trin Tantsetthi helped TISI to register TIS-620 with key international agencies such as ECMA and Unicode/ISO 10646. The process was a crucial step to make sure that all subsequent implementations of MS Windows and the Macintosh OS could accommodate a Thai standard character set and input/output method consistently.

This interesting story is documented in Trin's article "Annotated Reference to the Thai Language Implementations on the Internet". (http://www.inet.co.th/cyberclub/trin/thairef)

The Internet and Thailand

Internet statisticcs in Thailand collected by Truehits web site from January 2003 to October 2006. From top down: the operating system, the search engine usage and what kind of web sites were mostly vieved.

I briefly encountered many operators of BBSs (bulletin board systems) in 1979. I remember Alan Dawson, Woody Khoman, Botter Reeves, Craig Emmott and Tony Waltham. Those were the experts in Thailand who networked many BBSs together and organised a lively monthly meeting to reinforce their regular electronic communications. I also met Wuthipong Techadamrongsin (from Prince of Songkla University), whose computer centre established a regular Unix email connection with Melbourne University, under the support of the Australian International Development Programme. I considered this connection as the first daily email exchange service for Thailand.

In December 1991, a very important meeting and a training course took place in the Asian Institute of Technology (AIT). The event was organised by Dr Kanchana Kanchanasut, the "mother of the Internet" in Thailand. Dr Kanchana has administered the .th domain since the beginning. The event was important in many ways: first, this was the first course about Unix computer networking; secondly, it dealt with the formation of an email working group in Thailand; and thirdly, the group united well and could raise research funding from Nectec plus some in-kind donations from IBM, DEC and HP. Robert Elz, from Melbourne University, came to give a lecture at AIT at that event.

The amazing thing about creating the Internet in Thailand was the degree of interaction and cooperation among the members of the working group, which was called "nwg.nectec.or.th", or the Nectec Email Working Group. That name became the first mail server for all of us.

Internet email and Usenet newsgroups were used extensively since the launch of ThaiSarn in April 1992. ThaiSarn stands for the Thai Social/Scientific, Academic and Research Network. At that time, I was using the fastest modem, 14,400 bps, to serve as the country's gateway to the Internet at Thammasat University, during the time of the May 1992 coup. Kamol Hengkiatisak shared Bangkok Post reports with the soc.culture.thai newsgroup to let the whole world read the most up-to-date news reports about the event.

The first Internet connection in Thailand was at the Centre of Academic Resources at Chulalongkorn University. Led by Dr Yunyong Teng-amnuay and Dr Charumatr Pinthong, the first 9,600 bps leased line to UUNET in Virginia in the US was up and running in June 1992. A few months later, Nectec received funding to run the first 64kbps international link. Both Chula and Nectec upgraded the line speeds many times after this.

By 1994, the full-time Internet in Thailand had reached 27 sites all over the country, with 1,200 registered hosts accessible by the Net. The first WWW, FTP, News and Gopher servers were set up in Thailand, mostly by Trin Tantsetthi as a dedicated volunteer for ThaiSarn.

The success of this growth was attributed to the leadership of then Nectec director Prof Dr Pairash Thajchayapong, and the relentless contribution of Nectec researchers such as Morragot Kulathamyothin, Passakon Pathombutr, Chalermpol Charnsripinyo and their team members. For full information, about this, please refer to http://www.nectec.or.th/bureaux/nectec/ThaiSarn.book.

It was exciting to be involved in the ever-growing Internet since its conception. I was inspired enough to move on from Thammasat University to Nectec to set up ThaiSarn. In March 1995, the very first commercial Internet service provider was established as the Internet Thailand Service Centre, a commercial joint venture among NSTDA, CAT and TOT. Only a few months later, the second ISP was established: KSC Comnet, led by Prof Dr Srisakdi Charmonman and Dr Kanokwan Wongwattanasin. A year later, many more ISPs were in service.

The ThaiSarn Network then refocussed into a high-speed research network. The first 2Mbps link between ThaiSarn and NACSIS of Japan was launched in October 1995. ThaiSarn later supported the Kanchanapisek Network and SchoolNet Thailand. Both projects were aimed at bridging the digital divide (even before the term came into existence). We followed guidance from Her Royal Highness Princess Maha Chakri Sirindhorn to make sure that information and knowledge could be created, verified, shared on the Net and improved.

The Kanchanapisek network was the first of its kind to allow free nationwide access to information without even the cost of a local phone call to the modem bank. The SchoolNet Thailand project later modified the free network concept into a high-capacity nationwide school network. SchoolNet supported up to 1,500 secondary schools in Thailand through the close collaboration among Nectec, CAT, TOT and the Ministry of Education. Over 150 local volunteers were involved in the nationwide support for schools, all without any charges.

How big is the Internet in Thailand and are we losing our edge against our neighbours?

Thailand, Malaysia and Singapore started the Internet at about the same time. However, the speed of development was different. Many investors in Thailand often blamed the high cost of leased circuits for the ISPs to connect to the international Internet. When we looked at the official statistics of APNIC (Asia Pacific Network Information Centre), the central body for allocating the IP numbers to each country in the region, we found that Thailand is ranked number 11 by the size of the IP numbers in use.

Nectec has been tracking all Internet communications links in Thailand (domestic and international connectivities) since 1992. The number of Internet users has been estimated by Nectec and later assisted by the National Statistical Office through its household surveys in 2003-2005. My current estimate of the Internet users in 2007 is about 13.15 million users (see http://www.nectec.or.th/internet).

Some nostalgic remarks: Siam Commercial Bank was first to become a corporate Internet node in Thailand (March 1995). The first online election report was carried out by the Bangkok Post (June 1995), and the first big Internet usage event was for the Asia-Europe Meeting (March 1996), where CAT, TOT and Internet Thailand Company (INET) jointly supported a 4.5Mbps Internet link for participants and the international press through the largest Internet cafe service at the Queen Sirikit Conference Centre

Content is the key

The first killer application for IT users in Thailand was the Thai word processor developed by Kasetsart University (Thai Easy Writer for CP/M machine) and Chulalongkorn University (CU-Writer, or CW, for the IBM PC with HGC).

According to Dr Wanchai Rivepiboon, CW version 1.1 was first released to the public in April 1989. It was a tremendous success because of the demands for quality printing of Thai documents. The Faculty of Engineering of Chulalongkorn University continued to support and improve the program for about five years before commercial word processing software running on the Windows platform took over in 1994.

The first web server of Thailand, http://www.nectec.or.th, provided comprehensive information about Thailand in the English language under the title "Thailand the Big Picture" between 1993 and 2002. Today, the three most popular content providers in Thailand are pantip.com, sanook.com and manager.co.th.

The statistics relating to the web site ratings were provided by http://truehits.net. Truehits keeps track of the browsing activities to its members' 9,400 web sites. Truehits serves more than 70 million user clicks per day. The results from truehits are amazingly clear: a third party web statistics provider at low cost to all members.

Truehits also gave us the information about the most popular search terms in Thailand, and the popularity of search engines. To my disappointment, the Truehits report found that the most popular terms relate to games, horoscopes, music and jobs. The seasonal words are related to the current affairs of that time, for example: Tsunami, Anna, Dae Jang Kum, Royal Floral Show, Mother's Day, Loy Kratong. It seems that most people are not doing any serious work on the Internet. Anna is the name of a TV star whose naked photos and video were being distributed on the net.

How about the "market share" among the Thai web sites? The majority of Internet users in Thailand are visiting entertainment and game web sites (50% of all clicks). About 20% are browsing the web for news, business and getting services from the Internet. Government and education content are scoring at about 3.4% (both not more than 1.75%). The indicators tell us that Thailand needs to develop e-government and online learning software and content seriously.

E-commerce in Thailand

Six IT laws were planned by the NITC in the year 1997, with two draft laws being enacted as one law, the Electronic Transactions Act of B.E.2544 (2001). The ETA2544 recognises the legal status of data messages by treating them as functionally equivalent of writing or evidence in writing, to promote the reliability of electronic transactions.

Through the ETA2544, the Electronic Transactions Commission was established to facilitate and regulate the use of e-transactions. A number of Royal Decrees have been planned, and they are emerging. These include the provisions of sub-laws to facilitate the standard practice for government electronic transactions, IT security, privacy, and e-payment handling.

Other IT laws were related to the provision of the National Information Infrastructure (NII), data protection, computer misuse and electronic funds transfer. The laws have been completely drafted, with the computer misuse law being considered by a special commission for the National Legislative Assembly.

One key enabler for e-transactions and paperless transactions was the use of Public Key Infrastructure (PKI). A number of e-Certificate providers have been set up, and the e-Transactions Commission also laid down the root CA (certification authority) structure to handle the interoperability of all CAs. The Thailand PKI Forum was set up in 2005 to coordinate the unity of all PKI services in the country.

In 2006, the e-Transactions Commission issued the Information Security Standard for Thailand, based on ISO/IEC 17799 and ISO/IEC 27001. The document was widely distributed and voluntarily adopted by a number of organisations. It is anticipated that the Bank of Thailand and the Security Exchange Commission will adopt the standard and enforce the compliance.

Successful e-commerce sites in Thailand are http://www.thaigems.com, http://www.thaisecondhand.com, http://www.tohome.com, http://www.pramool.com.

Software industry - gaining speed

Software Park Thailand was established in 1997. Its mandate is to develop and strengthen the software industry in Thailand. The Software Park provided training and certification on software quality standard using the CMM and CMMi practice from Carnegie Mellon University. It also facilitates office incubation space for start up companies.

A number of new Software Parks are being planned and developed in the provinces of Thailand. Dr Rom Hirunpruk was appointed the first director of Software Park Thailand.

After the Ministry of ICT was established in 2002, it established the Software Industry Promotion Agency (SIPA). Mr Manoo Ordeedolchest was appointed as the first SIPA director. SIPA supports the software industry through exhibitions and trade shows, funding for government-led development projects and software contests. It's focus areas are enterprise software architecture, animation/multimedia, and embedded software.

Open source software significantly has gained some interest from large enterprises and universities in the past five years. About 60% of all web servers in Thailand are running on Apache. The most popular OSS applications for the desktop in daily use in Thailand are Mozilla Firefox, Thunderbird, OpenOffice.Org and Freemind.

Large local software companies worth mentioning are Reuters (which incorporated Biznews), SoftSquare Group and Progress Software. For the emerging embedded software activities, the Thai Embedded System Association (TESA) was set up to establish the resource pool of embedded system experts to solve large problems from major manufacturing companies. TESA was founded and chaired by Dr.Pansak Siriruchtapong, who is currently the director of Nectec.

Bad News: spam email is on the rise

Modern computers are both convenient and fast. But they are constantly attacked by malicious computer viruses, worms and Trojan horses. In the past two years, spam email has grown significantly. Since January 2006, virus-infected email messages seemed fewer, but spam mail now accounts for more than four times the number of clean messages every day.

There is harmful content on the Internet, including pornographic video and chat rooms. These web sites attract young people. Often the media (TV and newspapers) become the main source of propagating the news about certain harmful content to the Internet users. As we have observed, "search keyword" statistics have often surged based on the names that have appeared in the newspapers. It is a hard decision for the authorities to control access to those web sites.

It is anticipated that the forthcoming Computer Misuse Act will help the authorities curb unlawful activities in Thailand. However, it is hard to block harmful content from abroad (except for child pornography, which is illegal in most countries).

Good News: HDD Champion, RFID and Broadband

Thailand became the world's largest exporter of hard disk drives in 2005 as the industry generated more than US$263 billion in exports. That's 9.4% of total Thai exports and 42% of the worldwide HDD market. HDD production volume has more than doubled from 54.1 million units in 2003 to 119.8 million units in 2006. More than 100,000 workers are currently employed by the industry. The Thai government has initiated several support programs to strengthen the industry. In 2006, 14 universities were funded by Nectec to run research projects that respond to the needs of the industry.

RFID has also seen a strong interest from Nectec, electronics, software and manufacturing industries, logistics firms and supply chains. The National Telecommunications Commission (NTC) has approved Nectec's recommendation in December 2005 to use the RF spectrum in the band 920-924 MHz for RFID, in addition to LF and HF which were approved by MICT in 2004.

Broadband users in 2005 were about 570,000 subscribers. According to Nectec's survey that year, about 39% of the respondents were using broadband connections. This translates to about 3.18 million broadband users, or about five users per subscription of ADSL.

Finally, the size of the ICT market in Thailand in 2005 was approximately US$11.09 billion, with the majority of the market being telecommunications. The software market was valued at $1.09 billion.

The future

The telecommunications market is at the stage of its highest growth, with plenty of room at the top. The IT market is still pretty small compared to the big picture of the country. There are limits to growth of the IT market due to the laggardly growth of the Thai software industry. Internet users' tastes will need to shift from an entertainment-bias towards something more productive. The lowest "click" market share for government and education web sites (less than 3.5%) leaves a lot of homework for those responsible for e-government and e-education. Computer vulnerabilities such as attacks by viruses, worms, spam and hackers will create a huge computer security services market.

All of the identified shortcomings are sufficient for future planning and market opportunities for the Thai electronics and software industries. Foreign software solution providers are welcome to invest and operate in Thailand.

The public policies relating to the development of e-Government, useful local content and economic risk protection from computer attacks are the top priorities. All remaining drafted laws should be submitted to the NLA for legislation. Perhaps, it's time to take a road that is different from what Thailand has taken in the past five years to get different results:

I shall be telling this with a sigh
Somewhere ages and ages hence
Two roads diverged in a wood
And I took the one less traveled by
And that has made all the difference
'The road less travelled,' by Robert Frost

About the Author: Hugh Thaweesak Koanantakool is an electrical engineer by training. His specialisation is digital communications, coding and Thai language processing. He headed Nectec for eight years and ran the NITC secretariat office for six years.

Wednesday, February 14, 2007

Internet Theft and Fraud

My friends in the web hosting business have recently informed me that the big problem this year (2004) is security and fraud. I have read that currently the F.B.I. receives over 9,000 complaints per month pertaining to bogus email and websites. Why is this happening? Are just a few 'bad apples' doing it, or is it the result of a lopsided world economy where the underprivileged are finally striking back like the infamous Robin Hood? Whatever your moral view, I've got the strange feeling it stems from a growing unconscious greed in the social consciousness of modern society. People worship money, not spirituality or love. Am I wrong?

Technically, the main problems at the moment are 'phishing' or 'spoofing' scams. This is where the use of Spam or junk-email is used to lure computer users to look-alike websites where they are deceived into giving out personal information and financial data. Often these emails are coming from trusted sources where hackers have altered links to send you straight into their 'pockets'. The Internet user is duped into thinking that they are visiting a trusted website page, when actually it is an excellent copy of the original. There might be only one tiny change in the web address that is often not easily recognizable.

Identity theft is where multiple tricks are employed to make you fill out fake forms on fake sites to get all sorts of information that can then be used by thieves to steal money or get free Internet access. Anything from credit card numbers to account information, passwords, billing data and personal phone numbers and addresses have been stolen and used for criminal purposes.

These tricksters, few or many, are wizards at finding loopholes in mail systems of legitimate sites. Just go to the site entitled www.crimesofpersuasion.com and read some articles about a few of the more famous scams that have been busted or that are still in circulation. There's a story about a 17-year-old boy who was arrested with over a million dollars in misappropriated funds hidden in a Costa Rican casino account! Smart kid, but how smart is he really if he got caught? On the site above there are also tips for consumers generally focusing on how not to give your information away to anyone at any time. Check them out.

It worries me a little, this huge amount of illegal activity. I know that a lot of people feel that currently the world is very imbalanced in terms of wealth and spirituality and that this new epidemic is just a karmic reaction of the oppressed masses. The United States earns 50 percent of the world's economy, of course some of the other 95% of Earth's population is going to be keen for a piece of the pie, right? Steal from the rich and feed the poor like that guy in the green tights.

The funny thing is I think that a lot of these thieves are living in America and unbeknownst to themselves be already part of the top 5% of wealthy humans. The problem is that they always want more. Money can become addictive in a consumerist society whose advertising and marketing schemes are constantly bombarding us with stimulus relating to the next new product that we 'need' in our lives. We are never satisfied with what we've got. The next purchase's momentary injection of adrenalin becomes more of an imperative than any concept of lasting spiritual happiness.

Feel sorry for these people that have to go through all the rigmarole of sorting all these frauds from the real sites out there. I doubt there is a religion on Earth that teaches that theft is a balanced respectful action. I do know that when the country of Australia was founded it was done so on the backs of convicts, many of who had only stolen bread to survive. That's a kind of theft that will question your moral value system. I'll leave you with one last question: If the 'first world' has nearly all the money on our planet, are we the biggest thieves of all?

Jesse S. Somer
M6.Net
http://www.m6.net Jesse S. Somer is a concerned human hoping to one-day witness humanity living in a peaceful and egalitarian world.

Beware of the Newest Activity Online: Phishing

No. I'm not talking here about the outdoor activity enjoyed by many. And no again; I did not misspell it. Phishing is the name given to the latest online scam where millions of unwary Americans are getting their identities stolen.

This fraudulent activity is considered the fastest growing crime of modern times. The favorite target groups of phishers seem to be very young children and senior citizens, as they do not often ask for credit reports, fill out credit card applications or solicit loans. This allows the thieves to go undetected for longer periods of time; but still, be careful. We all are potential targets.

Remember when throwing away unshredded documents with personal information in the trash bin was considered a big risk for identity theft? While this still happens, identity thieves have become more sophisticated in recent times, and this is how they do it?

Phishers create bogus e-mails that look as if they came from large, well-known institutions and banks, such as eBay, Paypal, Citibank, EarthLink, and Wells Fargo among others. These e-mails claim that you are due for an account update, or that the account number, password, social security number or other confidential information needs to be verified. Then they warn you, stating that if you do not do it within a certain period of time, that your account will be closed, terminated, the service discontinued, or something to that effect.

They even provide you with links to websites that look legitimate, because they hijack the real logos of these well known banks, and trusted institutions and companies. And that is the scary part? these e-mails look 100% legitimate, but they are not.

In some cases it goes even further? some of these phishers are installing spyware on your computer to monitor your online activities. So? should you leave the online world for good? Not necessarily.

These are a few things you can do to protect yourself from these scammers:

1. Do not respond to any e-mail that asks for personal information from you, such as account number, credit card number, user names, passwords, etc. If you suspect that the e-mail, indeed, be legitimate, contact your bank or institution to verify this.

2. When in doubt, visit the Anti-Phishing Working Group for an update of the latest scams, and tips to avoid becoming a victim. The website's URL is www.antiphishing.org

3. Websites like www.Paypal.com, www.citibank.com, and www.ebay.com, offer security tips and tell you what information they'd never ask for in an e-mail.

4. Get anti-virus software and keep it up-to-date.

5. If you suspect you have received a fraudulent e-mail, do not click on any links within it, and forward it to the FTC at uce@FTC.gov

Finally, if you suspect you've been a victim of this fraud, get a copy of your credit report immediately to check for unusual activity. If you discover that you've been a victim of identity theft, close your account at once and?

- Call the Credit Bureau.

- File a police report.

- Call the FTC ID theft hotline at (877)IDTHEFT.

- Alert other financial institutions where you have accounts.

According to the Anti-Phishing Working Group, phishers send millions of e-mails a day, getting about 5% response. Even with this low response, it is estimated that about 150,000 Americans have fallen prey to these scams since May of 2004. Get informed. Do not become a victim yourself.

==============================================

You have permission to publish this article electronically or in print, free of charge, as long as the bylines are included. A courtesy copy of your publication would be appreciated.

E-mail: marketingplanet1@aol.com
November, 2004.

==============================================

Tamara Baruhovich is the author of "Straight Talk about Network Marketing" A no hype, no B.S. e-course that shouldn't be missed if you are serious about starting a successful career in Network Marketing! Get your complimentary copy here? e-course04@aweber.com

Anti Trackback and Comment Spam Methods

What is spam ?

Spam is text or URL, in one or several exemplars, neither being waited nor wished, not having, neither directly nor from its shipper, no relationship neither with the recipient nor with a possible
resource related to the recipient.

How does spam appears in blogs ?

  • Through the comments' body and commentator's URL.
  • Through trackbacks' excerpt and permalink's URL

What are the anti-spam methods?

  • Authentication by connection
  • CAPTCHA
  • Black List
  • Bayesian Filter

Other methods to minimize spam :

  • Time Interval between submissions / Number of submissions per hour.
  • DDD.
  • Secure Form Mode : force page and submission to be manual.
  • Rank Denial : Directs hyperlinks an intermediary server.
  • Autoclose after N days: entry stops accepting comments or trackbacks.

Which data are analyzed by these methods ?

    Active methods do analyze the shipper to check if it's:
  • a spamer by coparing its IP address with blacklisted ones.
  • authorized by authentication
  • a human by CAPTCHA
    Passive methods do analyze :
  • comment's data:
    • nickname
    • eMail address
    • URL
    • message
  • trackback's data (concerning the shipping blog):
    • blog's name
    • entry's title
    • entry's excerpt
    • permalink's URL

What are the limits to these methods ?

Cross use of several of these methods allows excellent results concerning comments, but weak results concerning trackbakcs.
Difference between comments and trackbacks is that comments are sent from the recipient's blog, which allosw all above methods to be used, whereas trackbacks are sent from the shipping blog (this avoids the use and need of 2 interfaces).
- Consequently it's not possible to use CAPTCHA, authentication and Secure Form Mode methods with trackbacks.
- Another big problem, when all the trackback's data are unknown, especially the IP address, it is quite impossible to avoid spam, mainly because the blacklist and the bayesian filter are becoming inefficient.
- Last inconvenient, trackback autodiscovery is usefull for bookmarklets but also to spamers to who it gives the trackback URL.

Glimpse on futures anti-trackback-spam methods

Copyright � 2004 - Reflexive-Blog - Bobby Masteria
Webdesigner - WebMaster - MetaBlogger - Multi-Blogger - BlogMaster
Licence - Reflexive-Blog - Anti Trackback and Comment Spam Methods - M�thodes Anti Spam de Trackback et de Commentaire
Always use the URL Associated with this article. - Always use and mention my full name. - Never mention my eMail address.

The Great Spam Scam: Five Strategies To Stop Brand and Revenue Robbery

Marketers usually think of anti-spam tactics as 'how to prevent' readers from perceiving their e-communications as spam. There is another, more sinister, consequence that may affect you. Spam is not just an inconvenience. For legitimate businesses, it steals productivity, erode your brand, and rob you of revenue.

Many companies have no idea their products are being sold on the black market or their customers are tangled in credit card frauds thinking they ordered something from your organization and are about to receive zip. These shifty sales schemes cost companies billions of dollars each year in lost customers and sales of products and services.

While Aunt Margaret may have served Hormel canned pork (SPiced hAM referred to as Spam), like it or not, you knew what was in it. With Internet spam (unsolicited bulk email or unsolicited multiple postings to one or more Usenet newsgroups), you don't always know what you're getting. Some spam messages are convincing. Some are plain annoying. Whether spicy or not, many of them result in criminal offenses on a worldwide level.

Producers of a popular product, a drug like Retin-A, a best-selling software program, or a service such as a vacation package, are all economically affected by spammers. When people buy these knock-offs, legitimate companies lose money. When people order something and don't receive it, your company gets a bad name.

Five strategies for protecting assets

Whether your company sells pharmaceuticals, software, or other products, these five plans of action will help stop brand and revenue robbery:

1. Protect your intellectual property.
Follow these guidelines for managing the digital rights to your property and for protecting it.

- Verify everything is copyrighted and trademarks are registered. That includes registering with the U.S. Customs Service, because much of this criminal action happens overseas.

- Make formal contracts with your distributors or authorized resellers. Get it in writing that they agree not to send spam about your products.

Unfortunately, in most cases, your audience assumes you or one of your distributors is sending these spam messages about your product. Most of your customers or prospects have no idea someone completely unrelated to your sales organization would take the liberty to send a missive about your intellectual property.

2. Join industry associations.
Every member of the Internet community will be more effective working together than as individual organizations. One way to connect with other companies facing the same problem is by participating in lobbying efforts with them. If you work together, you can trade war stories and tap into additional valuable resources. Try to connect with people that share the same values your organization does. Communicate regularly about issues surrounding spam and the progress of your task force.

3. Be prepared to react.
Once you catch someone, be prepared to prosecute immediately. Spam prevention can only happen at the expense of current spammers, by taking legal steps to enforce the minimal standard out there, and prosecute those guilty of major crimes.

- Set up investigators to sleuth the problem.

- Set up an abuse email address (abuse@yourcompany.com) so buyers and customers can forward spam to you.

- Report anything that affects your brand to the authorities.

- Track the spammer down. Instead of starting at the sender of the spam, direct your search to the end result of the spam. You can do this by making a purchase. That way you will know immediately if the spam is criminal in nature. You will also know where the spammer collects his or her payment, and if the spammer is a pirate or credit card scam artist.

- If the party is guilty of pirating your product, work with that third party payment collection company such as Visa, PayPal, or BillPay and inform them of the problem. They will then get a court injunction to cease and desist, meaning they can shut the guilty spammer down. If the party is guilty of credit card fraud, inform the third party payment company, and also inform the internet service provider (ISP). In the U.S., the ISP will immediately shut down the spammer. Other countries have different laws, however, which is one of the reasons you want to register your product with the U.S. Customs Service.

Know that if you prosecute legally, once you get a court injunction and win your case, you are eligible for disgorgement. This legal term means you are entitled to all of the revenue that the spammer collects. While you may not get rich, at least you'll help stop the problem at its source.

4. Establish great business relationships with distributors and customers.
This strategy relies heavily on public relations including enewsletters. Part of image building, your branding falls under ensuring good business relations. Plante recommends the following ways to build these relationships:

- Let your customers know that spam exists.

- Send out customer surveys about your products and their attitude about spam, piracy, and credit card fraud.

- Create publicity around your steps as a Spam Fighter. Position yourself as a leader in the fight. Perhaps, add an occasional article in your newsletter about your fight against spam or put a note that spam is not tolerated by the "unsubscribe to newsletter" information.

5. Don't continue to spread spam to other users.
While legislation is one way to prevent spam from spreading, Robert Alberti of Sanction, Inc., recommends using technology such as firewalls, spam filters, and virus protection to help prevent and detect fraud. He also recommends using the task force to help end users become more knowledgeable about spam.

Position yourself in the eyes of customers and prospects as one of the "good guys." Regularly inform customers about the steps you're taking and alert them about possible fraud. As long as you continue to communicate with your customers, they'll realize the people at your company and throughout the Internet community don't like the taste of e-mail spam.

Meryl K. Evans is the Content Maven behind meryl.net who increases conversion rates by writing and editing content so organization can focus on their core business. She is the editor-in-chief of the eNewsletter Journal and Shavlik's The Remediator Security Digest. Visit her Web site at http://www.meryl.net/blog/

20 Words That Kill - At Least When It Comes to Spam Filters

Spam, spam, spam. It's terrible not only for those of us on the receiving end, but for those of us who SEND e-mail.

This deluge of irritating junk has unfortunately interfered with legitimate e-zine publishers, because we're caught in the anti-spam crossfire. If you publish any type of e-mail publication, there's a likely chance that your e-zine is NOT reaching a portion of your readers. Why? Their Internet service provider (ISP) or e-mail program uses a spam filter.

These software programs search for words and phrases that are typical of spam and assign each incoming e-mail a "score." If your e-mail has too many of these words and phrases, you receive a high score, and you may be blocked.

TOP 20 "KILLER" WORDS/PHRASES YOU MAY BE USING

While there are other words that will cost you more "points" than these do (e.g. sexual phrases), here are the most common "trigger" words and phrases that you may be using in your e-zine:

  • amazing
  • cancel at any time
  • check or money order
  • click here
  • congratulations
  • dear friend
  • e-mail marketing
  • for only ($)
  • for free
  • great offer
  • guarantee
  • increase sales
  • order now
  • promise you
  • risk free
  • special promotion
  • this is not spam
  • to be removed
  • unsubscribe
  • winner
  • WHAT'S A PUBLISHER TO DO?

    You have two choices when it comes to beating the filters. One is to avoid using these words and phrases altogether. I've found that hard to do. For example, in a recent issue, I discussed how to use your e-zine to increase business. Unfortunately the word "increase" cost me a fat 1.4 points in SpamAssassin, one of the most popular filter programs.

    Your second choice is to disguise these words and phrases in clever ways by inserting keyboard symbols within them and/or replacing a letter in them with a symbol. The trick is not to make it too cryptic - you want your readers to be able to understand what you're saying. For example, in my e-zine, I use "fr*ee" for free.

    While some spam filters pick up on this trick and penalize you for doing it by adding onto your score, I've found that the points this tactic costs you penalize you much less than using the words and phrases themselves. It's not a perfect solution, but it's working for now.

    TEST BEFORE YOU SEND

    It's a great idea to test how YOUR e-zine stacks up before you send it out. The good news is you can do this for FREE.

    Lyris' Content Checker (http://www.lyris.com/contentchecker) tells you how your e-zine ranks in Spam Assassin. All you do is copy your e-zine text and paste it into the box on their site. They'll run your free report and e-mail a copy to you. It usually arrives within minutes.

    The report will tell you exactly which words are costing you points. Usually you should only be concerned if your score is over 5 points. If so, you can either delete those words or disguise them, as I mentioned above.

    I test each issue of my e-zines in Content Checker before I publish them, and often I'm surprised (and relieved) that my score is low. That makes me a happy publisher. : )

    (c) 1999-2002 Alexandria K. Brown

    ABOUT THE AUTHOR

    Alexandria K. Brown, "The E-zine Queen," is author of the award-winning manual, "Boost Business With Your Own E-zine." To learn more about her book and sign up for more FREE tips like these, visit her site at http://EzineQueenTutorial.com

    Phishing for an Identity

    Phishing is rapidly becoming on the largest threats to your personal, financial, and emotional wellbeing. No I am not talking about Saturday afternoons out on the boat with your grandfather, listening to stories that being with "When I was your age?"-now while these probably conjure up horrific childhood memories of such stores, they in no way come close to the horror felt by victims of Phishing.

    Phishing (fish'ing ? to trick people into providing their personal and financial information by pretending to be from a legitimate company, agency or organization) is a fairly new scam propagating itself on the internet in many different forms. Each has the same sole purpose of convincing you to volunteer your personal and financial information and hand if over to these crooks.

    One such attack was targeting PayPal (www.PayPal.com) customers, by sending out mass email (spam) stating that there had been a security breach and the account has been suspended until you verify some information. Well this may sound reasonable, but the truth behind this was it was not from PayPal; rather a carefully orchestrated scam to capture your PayPal username and password, credit card information, debt card pin number, mailing address, and social security number among others. What made these even scarier was the fact that the message was designed so well-using PayPal's logo and website layout perfectly-that even I had to take a second look. This convinced people of the legitimacy of the message and prompted individuals-estimated in the thousands-to happily provide their information over to the scammer.

    There were a few items that made this email message stand out as a fraudulent spam message rather than legit communication:

    ? Greeting: The greeting at the top of the message was "Dear PayPal Member". This should alert you as PayPal, along with most major companies will address you by name or company associated with the account. EX: Dear Steven

    ? Website address: The website address that was being linked to from within the message was not www.PayPal.com, but rather a very clever hoax. When you look at the link in the message it appears to go to PayPal's website, but when you click on it a different address (one of the scammer's website) loads.

    Now that I have scared you enough for one article, which this is not my intention to do so, but you must also realize the severity of this issue; there are a few simple things to keep in mind. Do not trust email messages. Let me say that one more time DO NOT TRUST EMAIL MESSAGES. If something seems fishy (no pun intended), do not trust it. If it tells you to update your information, call the company up that it mentions or login to your account as you normally would. In this example, you could call PayPal's customer service number or login at PayPal's website (visit it by opening your web browser and manually entering http://www.PayPal.com--not through the link provided in the email). Doing so will verify that you are not falling victim to Phishing.

    Steven Carlson is an expert in identity theft and issues relating to credit restructuring solutions. He is serves as the President and CEO of Digital Intelligence Group, Inc. (www.DigitalIG.com) a company that provides identity theft and credit restructuring services through its brand eCreditRx (www.eCreditRx.com)