Blog

This piece is a follow up to our discussion on the DMARC Record, Policy, and Report. We thought it would be helpful to spearhead a discussion on shortcomings on DMARC. DMARC: Reliant on SPF and DKIM DMARC unquestionably helps when it comes to handling spoofed phishing messages, but it is not without its faults. ItsRead more

Since its humble beginnings in 2010, DMARC (Domain-based Message Authentication, Reporting & Conformance) has become a powerful tool for many organizations to improve their email filtering and properly assess the strength of their domains’ emails In particular, the prevalence of Business Email Compromise (BEC) attacks, which rose 42 times relative to Banking Trojans between theRead more

Last week I read a fascinating yet terrifying paper on the natural evolution of bots. The paper is called “The Socialbot Network: When Bots Socialize for Fame and Money” by Boshmaf et al. Bots in the email security world have been around for a while and are used primarily for spamming. Socialbots are programs thatRead more

Around 2 years ago, Richard Stallman called cloud computing a trap and said it was worse than stupidity.  For those of you who do not know Richard Stallman, he’s the founder of the GNU project and the pioneer of the GNU Public License, an unrivalled genius in the programming world and a holder of 8Read more

Over the last couple of weeks, I’ve been working on a project where I needed to determine the creation dates of various domains. Little did I know about the complexities involved in achieving such an apparently simple task. After all, ICANN has a WHOIS Data Reminder Policy (WDRP), thus all domains must have this informationRead more