The
Zindos worm, which uses MyDoom.M-infected computers to launch a denial of service attack on
www.microsoft.com, is having no visible effect thus far on the performance of Microsoft's web site. The worm is installed through backdoors on a network of machines compromised by the
MyDoom.M virus, which disrupted the performance of search engines earlier this week.

Once Zindos installs itself, the host machine is programmed to commence an immediate DDoS on Microsoft, unlike earlier MyDoom variants with trigger dates for electronic attacks.
Posted by Rich Miller at 30 July 2004
in
Performance
|
Print this Page
Open source developer
MySQL AB has entered the hosting business with
MySQL Hosting, providing shared hosting accounts preconfigured with the company's popular MySQL database and web-based management tools.
MySQL databases are often bundled with shared hosting accounts, but many hosting companies include them in second-tier plans, charging a slightly higher monthly rate. MySQL Hosting's entry-level plan offers 50 megabytes of web space and one MySQL database for $9.95 a month. That positions it competitively compared to many shared hosting providers offering a single-database MySQL bundle as a premium plan, but above discounters such as Go Daddy, which offer shared hosting with MySQL for as little as $3.95 a month.
Posted by Rich Miller at 30 July 2004
in
Hosting
|
Print this Page
DoubleClick says its banner ad network was disrupted today by a distributed denial of service (DDoS) attack on its domain name servers. As DoubleClick's DNS servers became unreachable, the attack had a ripple effect, leaving many of the network's 900 client sites unable to retrieve banners from DoubleClick's ad servers. The company said the attack lasted about four hours and caused "severe disruptions" for customers.
Posted by Rich Miller at 28 July 2004
in
Performance
|
Print this Page
You can fool some of the people all of the time, as
Abraham Lincoln once noted. The authors of the many versions of MyDoom rely upon this truism, continuing to trick e-mail users into opening virus-laden attachments. The latest version,
MyDoom.M, caused performance problems Monday for Google and other search engines, which were used to refine its spread.
MyDoom.M's ability to disrupt the Web's best-equipped sites illustrates the difficulty of training e-mail users to safely manage attachments. It also has sobering implications for banks seeking to educate users about phishing scams, which in recent weeks have featured social engineering tactics nearly identical to those that succeeded with MyDoom.M.
Posted by Rich Miller at 27 July 2004
in
Security
|
Print this Page
As a recent column noted, the spate of security problems that have plagued Internet Explorer could well mark a turning point in the fortune of one of its main rivals, Mozilla Firefox. But there is another side to this story, for it is important to note that many of Microsoft's woes in this area are self-inflicted, a result of its dogged determination to integrate the Web browser with its operating system.
Posted by Glyn Moody at 26 July 2004
in
Around the Net
|
Print this Page
The consolidation in Europe's fast-growing web hosting industry continues, with the third-largest provider,
Host Europe, assuming the brand of new owner
Pipex. The deal between the two British providers is the fourth major merger this year for the European hosting market.
Host Europe PLC, which was bought by Pipex in April for 31 million pounds, has changed its name to Pipex Communications Hosting Ltd. and will rebrand its web site later this month. In May, NetBenefit bought com London-based rival Easily Ltd. for 2.5 million pounds. In a pair of January deals, ViaNet.Works of Amsterdam acquired France's Amen (which hosted 111k hostnames) and Lycos Europe bought United-Domains of Munich.
The consolidation hasn't altered the dominance of hosting companies in Germany and the UK, which are home to the nine largest hosts in the EMEA (Europe-Middle East-Africa). Germany has twice as many hostnames as any other country in the region, driven by the success of 1&1 Internet AG and Tect AG (Strato), the two German hosting giants who continue to amass customers. 1&1 now hosts more than 4 million hostnames, while Tect has more than 2.1 million. The largest EMEA provider not based in Germany or the UK is Italy's Aruba, with 240k hostnames.
Posted by Rich Miller at 23 July 2004
in
Hosting
|
Print this Page
Internet scanning for servers running Secure Sockets Layer (SSL) has spiked in the past week, raising suspicions that hackers may be profiling targets for future attacks. SSL encrypts sensitive information for e-commerce transactions, and its presence can indicate a high-value target for crackers seeking to steal financial data.
Scans of port 443, which is used by SSL, have surged since July 15.
A similar pattern was seen in April, shortly after exploit code was published for a critical security hole in Microsoft's implementation of SSL. That scanning was followed by attacks on Australian banks in late April, and the same vulnerability was used last month to hijack Windows servers running IIS 5.0 and spread phishing trojans to visitors of the compromised sites.
Posted by Rich Miller at 22 July 2004
in
Security
|
Print this Page
The popularity of RSS feeds is testing the web infrastructure of at least one publisher, which likens the impact of newsreader traffic to a denial of service (DoS) attack.
Infoworld.com experiences a "massive surge of RSS newsreader activity at the top of every hour," according to Chad Dickerson, the CTO of Infoworld. "If I didn’t know how RSS worked, I would think we were being slammed by a bunch of zombies sitting on compromised home PCs," Dickerson writes. "Our hourly RSS surge has all the characteristics of a distributed DoS attack, and although the requests are legitimate and small, the sheer number of requests in that short time period creates some aggravating scaling issues."
Posted by Rich Miller at 19 July 2004
in
Performance
|
Print this Page
Banks will imminently be under pressure from regulators, customers, and indeed, fraudsters to eliminate opportunities for cross-site scripting from their sites, following a demonstration that several very widely used banking web sites could act as conduits for fraudsters to solicit and steal their customers' account information.
The weaknesses were published by British web developer and security researcher Sam Greenhalgh, who established his credentials last year by discovering the %01 bug in Microsoft Explorer. Amongst the vulnerable sites are MasterCard and Barclays, which ironically each recently announced initiatives to combat phishing, apparently without ensuring that their own houses were in order.
Greenhalgh's demonstration uses a technique known as cross-site scripting to insert javascript from his own web site into pages generated by an ATM locator on the main MasterCard site. Cross-site scripting (XSS) is a well known technique which involves injecting the text of code to be executed by the browser into urls that generate dynamic pages: attacks have been found by security researchers in a wide variety of products and specific sites over the last four years. The novelty in Greenhalgh's demonstration is the application rather than the technology: the potential of XSS for phishing attacks when used on a bank's site is very clear.
Having the ability to run their code from the financial institution's own site is a big step forward for fraudsters, as it makes their attack much more plausible, and will almost certainly lead fraudsters to seek out banking sites vulnerable to cross site scripting as a refinement on current phishing attacks which depend upon obscuring the true location of a window prompting for bank account authentication details.
Continue Reading...
Posted by mhp at 18 July 2004
in
Security
|
Print this Page
Traditionally, the end of an era is marked by terrible portents and cataclysmic events. As signs go, the sight of Sun's Scott McNealy exchanging banter (and hockey shirts) with Microsoft's Steve Ballmer might seem mild enough, but the shift it represents is indeed epochal.
The two companies come from very different backgrounds: Microsoft grew from the world of the first personal computers, Sun from workstations. But as their ambitions overlapped in the networked business world, Scott McNealy's strategy has been increasingly defined by his fierce and vocal opposition to Microsoft, especially once the latter took over from IBM as the driving force in computing.
This makes the cosying-up of the two companies extraordinary, even if the benefits of doing so are clear. Sun gets a couple of billion dollars, while Microsoft removes another troublesome competitor – one that had a dangerous tendency to call on national governments for help in its legal battles.
But most of all, both can take comfort from the creation of a united front against a common threat: GNU/Linux. Steve Ballmer gave the game away when he explained at the press conference where the Sun deal was announced that “it's an agreement that comes from two companies that believe in intellectual property, that develop intellectual property and that are respecting intellectual property.”
Posted by Glyn Moody at 16 July 2004
in
Around the Net
|
Print this Page
Red Hat remains the leading Linux distribution in use on the Internet, experiencing slight market share erosion in the first six months of 2004, but still showing a healthy net gain of sites under its new licensing structure. Debian and SuSE show market share gains among Linux distributions detected by our Hosting Provider Switching Analysis, while Gentoo has the fastest percentage growth rate.

The gains by Debian, SuSE and Gentoo have been helped by the continued growth of the hosting market in Europe, where these distributions have their largest users. Debian is now running on more than 1 million web-facing hostnames, showing particular strength among French service providers Gandi (72k hostnames) and Proxad (58.8k). SuSE, which is now owned by Novell, has its largest installations at German providers 1&1 Internet (174k hostnames)), Deutsche Telekom (97k), Evanzo (49k) and Intergenia AG (47k). More than a third of Gentoo's hostnames are housed at two European providers, Denmark's Forskningsnetten (6.1k) and Germany's Dotcom-server (5.6k)
Posted by Rich Miller at 12 July 2004
in
Hosting
|
Print this Page
Growth continued at major hosting companies in June, but at a more measured pace than the torrid expansion seen earlier this year. This month's
Hosting Provider Switching Analysis finds the providers with the 10 largest net gains added 336k hostnames in June, compared to an average of 731k per month for the top 10 through the first five months of 2004.
That trend held true for June's largest gainer, domain registrar Go Daddy, which added 64K hostnames after five consecutive months of growth exceeding 100k hostnames. Germany's 1&1 Internet AG was next, continuing its relentless growth as it exceeded 4 million web-visible hostnames for the first time.
|
Top Hosting Providers By Hostname Growth, June 04 to July 04 |
| Hosting
Company |
May 04 |
June 04 |
Growth |
%
Growth |
Primary
Region |
| GoDaddy
Inc |
2,333,943 |
2,397,960 |
64,017 |
2.7% |
Americas |
| 1&1
Internet AG |
3,995,359 |
4,044,735 |
49,376 |
1.2% |
Europe |
| Datasync |
503,295 |
547,153 |
43,858 |
8.7% |
Americas |
| Easynet |
138,831 |
177,726 |
38,895 |
28.0% |
Europe |
| NTT Communications |
51,441 |
81,916 |
30,475 |
59.2% |
Asia Pacific |
| Tect AG |
2,153,032 |
2,182,987 |
29,955 |
1.4% |
Europe |
| The Planet |
346,551 |
374,855 |
28,304 |
8.2% |
Americas |
| Deutsche Telekom |
382,572 |
402,133 |
19,561 |
5.1% |
Europe |
| NewDotNet |
29,939 |
47,944 |
18,005 |
60.1% |
Americas |
| Lasvegas.net |
102,571 |
116,205 |
13,634 |
13.1% |
Americas |
|
Posted by Rich Miller at 12 July 2004
in
Hosting
|
Print this Page
The Internet is under attack. More precisely, one particular way of using it is under threat: the decentralised, peer-to-peer (P2P) approach.
One piece of US legislation aimed at taming the rough vigour of P2P networks is called dramatically the “Protecting Children from Peer-to-Peer Pornography Act of 2003.” As its name implies, it views P2P as a sink of iniquity whose poisons threaten America's innocent youth. The P2P industry organisation P2P United naturally sees things differently, and suggests taking another approach to deal with the problem.
By comparison, the proposed US “Inducing Infringement of Copyrights Act of 2004” sounds quite innocuous, but as the accompanying press release explains, the targets are nonetheless “corporations distributing so-called ‘peer-to-peer filesharing software',” and their “truly malicious business model”, which entails “inducing” children to commit crimes by swapping music files. This has provoked some lively discussion, as well as a point-by-point rebuttal of the key ideas.
Although both Acts invoke the need to protect children to justify their new controls, the real impetus behind them comes from a very different imperative: to shore up a tottering music industry that is grappling with file-swapping on a massive scale (the leading P2P program has been downloaded over 350 million times). The legislation therefore forms part of a series of corporate assaults on P2P systems. The more recent proposal represents an attempt to reverse a decision handed down by a US court when it refused a request from the music industry to hold Grokster responsible for copyright infringement committed by users of its software.
Posted by Glyn Moody at 12 July 2004
in
Around the Net
|
Print this Page
Netcraft is an Internet services company based in Bath, England which provides Internet research data mining and security services, including anti-fraud and anti-phishing services, application testing, code reviews, and automated penetration testing to clients worldwide.
Netcraft has the following vacancies; applications from outside the UK are welcome if supported by citizenship of an EU country or a current work permit for the UK and an excellent command of the English language.
Software Development Roles
Netcraft wants to recruit software developers to its team based in Bath, England. Projects involve working on a range of commercial services extending Netcraft's network exploration and internet security services.
Important attributes include;
- A broad knowledge of Internet technology, together with an attention to detail, and a desire to find things out empirically rather than rely on conjecture.
- A keen interest in network security, data mining, or web based user interfaces.
- Evidence of conspicuous achievement and a strong computing background, consistent with a first class degree in Computer Science.
- Expressive verbal and written communications skills.
- A well developed sense of precaution; a person who likes to plan for the future with suitable programming abstractions, automated test suites & version control, and generally feel that they are in control of their own destiny.
- Demonstrable programming ability and experience.
-
Prior experience with any of MySQL, Perl (consistent with making effective use of the CPAN and developing web applications with Catalyst or mod_perl), Python, Ruby, Rails, Javascript, CSS, or Unix systems programming would be helpful.
Sales Positions
Netcraft requires additional sales people to sell its Internet services.
The role is based in Bath, and involves both account management and new business development, including generating prospects, responding to inquiries, proposal writing, and helping determine strategy for new services.
Candidates should;
-
Provide evidence of prior sales achievement, and demonstrate that they have with the attention to detail and determination necessary to succeed in a competitive environment.
-
Possess articulate verbal communications skills, and the ability to write well.
-
Be likeable and candid, capable of building long term relationships with clients, and further extending Netcraft's high level of repeat business;
-
Have a grasp of a broad range of internet technology, and an enthusiasm to learn.
-
Be confident using contemporary office technology, including electronic mail, RSS feeds, Instant Messaging, Microsoft Office (Outlook, Word, Excel) and wiki.
-
Fluency in languages other than English is also very much of interest.
A significant part of Netcraft's business is in the US, and time zone differences make it likely that a good chunk of weekday evenings is spent working.
Analyst
Netcraft requires an analyst based in its offices in Bath: periodic travel to client offices and industry events will be required.
The role would include producing content for news.netcraft.com,
writing promotional and analytical content for Netcraft services & datasets, and responding to questions from customers, building up a wiki-based repository of explanatory information about Netcraft's services.
Candidates should;
- Provide samples of their technology writing and demonstrate that they can produce material which is lucid, informative, and above all, interesting and enjoyable to read.
-
Articulate verbal communications skills.
-
Be likeable and candid, capable of building long term relationships with clients and the media, and further extending Netcraft's high level of repeat business;
-
Have a keen interest in Internet technology, and an enthusiasm to learn.
-
Be confident using contemporary office technology, including electronic mail, RSS feeds, Instant Messaging, Microsoft Office (Outlook, Word, Excel) and wiki.
-
Have an education consistent with a 2:1 or better degree and/or relevant experience in a role where writing about Internet technology is a core activity.
Graduates, Industrial Years, Summer Placements
Netcraft is very keen to receive applications from high performing Computer Science
students wishing to work at Netcraft after graduation, or work here for
an industrial year or summer vacation. Plenty of programming experience
and some background in one of the above technologies would be required.
Netcraft is also keenly interested in applications from graduates for sales roles.
Making Contact
Send a cv to cv@Netcraft.com.
Posted by mhp at 10 July 2004
in
About Netcraft
|
Print this Page
A table of the Hosting Providers who grew the fastest over the 6 months October 2003 to April 2004 is provided as an excerpt from our Hosting Provider Server Count. Companies are included in the filter if they started October 2003 with more than 600 servers, and finished April 2004 with at least 2000, and grew at a rate of 25% or better. This removes hosters which can show a significant percentage increase simply by virtue of being small at the start of the period.
Fastest Growing Large Hosting Providers by % Increase in Web Visible Servers
October 2003 to April 2004 |
|
Parent Company | Oct-03 | Apr-04 | % Change | Main Business Area |
| 1&1 Internet |
13,989 | 21,886 | +57% | Mixed Hosting |
| EV1Servers |
12,084 |
15,224 |
+26% |
Dedicated |
| The Planet |
1,298 |
4,402 |
+239% |
Dedicated/Managed |
| China Telecom |
1,966 |
2,802 |
+43% |
|
| Hetzner Online AG |
1,728 |
2,432 |
+41% |
Shared |
| Affinity Internet Inc |
1,789 |
2,326 |
+30% |
Dedicated/Shared |
| Intergenia AG |
1,507 |
2,105 |
+40% |
Dedicated |
|
Comparing with last quarter shows percentage growth down somewhat amongst the companies at the top of the list, although absolute growth in terms of servers is larger in this quarter.
Posted by mandy at 7 July 2004
in
Hosting
|
Print this Page
Onling gambling sites Eurobet and Coral have been
experiencing ongoing outages since early Monday, shortly after the completion of the Euro 2004 soccer championship and the Wimbledon tennis finals.
Online betting sites have been repeatedly targeted by extortionists employing electronic attacks, including a series of distributed denial of service (DDoS) attacks at the outset of the Euro 2004 event.
Netcraft is monitoring the performance of twenty leading UK Internet Gambling Sites, with dynamically updating graphs available here.
Posted by Rich Miller at 6 July 2004
in
Performance
|
Print this Page
Ranking by Failed Requests and Connection time,
June 1st - 30th 2004
During June all of the hosters monitored experienced an outage. Seeweb, an Italian hosting company, was once again the most reliable hoster, taking first place two months in a row. Second placed was the Pair Networks site.
This month the operating systems of the top 10 hosters was very mixed and varied, with three running Linux, three FreeBSD, two Windows (Myhosting.com on Windows 2003 and ExpressTechnologies on Windows 2000), one Solaris and one OpenBSD.
Posted by mandy at 5 July 2004
in
Performance
|
Print this Page
The rise of the phisher kings
continues apace. Their most recent achievements include the combined IIS and IE exploit that infects visitors to apparently impeccable sites, and a phishing attack based on the use of Browser Helper Objects.
There is nothing new in this, since bugs in Internet Explorer have been part
of the Internet landscape for years. What is novel is that this time people may have had enough,
prompting what has been rightly called "a growing crisis of confidence in Internet Explorer".
One straw in the wind is a recommendation from the Internet Storm Center, a global monitoring and alert system for online attacks. In the face of the IIS and IE
exploit, this organisation recommended that users "install and maintain anti virus software, if possible turn off
javascript, or use a browser other then MSIE until the current vulnerabilities in MSIE are
patched."
This is not the first time that users have been urged to switch browsers. In October last year,
US-CERT (Computer Emergency Readiness Team) offered the simple solution of "use a different
web browser" as a way of dealing with bugs in Internet Explorer. Two things make the
situation different now.
Posted by Glyn Moody at 5 July 2004
in
Security
|
Print this Page
Microsoft has
released a fix to address last week's
Phishing attack that spread through compromised IIS web servers. The update changes the configuration on Windows XP, Windows 2000, and Windows Server 2003 to address the malware attacks, known as
Download.Ject.
The update disables an ActiveX control known as adodb.stream, which will prevent the Download.Ject attack. The malicious code was being downloaded from the infected IIS servers onto users' machines, and included a trojan that records keystrokes in an attempt to capture eBay and Paypal passwords. The Russian server distributing the attack code was shut down on June 24, four days after the first reports of the exploit, but security professionals predict that copycats are likely to try and replicate the attack.
Posted by Rich Miller at 2 July 2004
in
Security
|
Print this Page
In the July 2004 survey we received responses from
52,131,889 sites, continuing the recent growth trend with a gain of just under half a million sites from June.
The open source Apache server has gained more than 4 million hostnames in the first half of 2004, compared to slightly more than 1.5 million hostnames for Microsoft server products. That split has closely tracked existing trends, leaving market share virtually unchanged so far this year.
The months ahead may test that stability, given recent security problems with Microsoft's Internet Information Server (IIS). Numerous sites running IIS 5.0 on Windows 2000 were compromised and used to install password-stealing trojans on the machines of Internet users visiting those sites. Microsoft insists only unpatched servers were breached, but the initial version of the key Win2K patch was buggy. It remains to be seen whether having infected their own customers with malware will prompt the affected Microsoft-IIS 5.0 sites to switch platforms. Previous Microsoft-IIS worms have had suprisingly little impact on market share, although Code Red prompted a general tightening of router and firewall rulesets restricting access to web sites of all denominations, not just Microsoft-IIS.
Total Sites Across All Domains August 1995 - July 2004
Top Developers
| Developer |
June 2004 | Percent |
July 2004 | Percent |
Change |
| Apache | 34710235 | 67.22 | 35122146 | 67.37 | 0.15 |
| Microsoft | 11021807 | 21.35 | 11115660 | 21.32 | -0.03 |
| Sun | 1664927 | 3.22 | 1656671 | 3.18 | -0.04 |
| Zeus | 763152 | 1.48 | 754721 | 1.45 | -0.03 |
Posted by wss at 1 July 2004
in
Web Server Survey
|
Print this Page
Copyright © Netcraft Ltd 2009. All Rights Reserved.