Cocktail

Verizon email problems

It has come to our attention that anyone on our email system cannot email anyone with a verizon.net, bellatlantic.net or gte.net (which are Verizon domains).

It is now confirmed that Verizon is blocking all international IP space from RIPE and APNIC and only unblocking IP’s when escalations are made. The security team management thinks this is going to stop their inbound spam problems.

We tried to speak with Verizon but since we are not their customers they would not let us plead our case. Fortunatley we have found a workaround for this problem and was able to send the registration information and support emails to Cocktail users with Verizon email addresses. However, we would like to ask all Verizon customers to call Verizon corporate offices at 1095 Avenue of the Americas in New York and lodge a compliant in Executive Escalations about this idea. Verizon Executive management really needs to re-evaluate their security management and team procedures again.

Related links:

• Top 10 Spam Statistics (Spamhaus)
• Verizon's E-Mail Embargo Enrages (Weird)
• Verizon faces lawsuit over email blocking (The Register)

IDN Spoofing Security Issue

A flaw in Safari and other web browsers, including Firefox, Omniweb, Mozilla, Opera and Camino, that leaves users open to a spoofing or phishing attack has been discovered.

This is a serious security issue caused by an inappropriate implementation of IDN (International Domain Name), which permits the use of international characters in domain names.

Click the link below in order to test whether or not your system is vulnerable (the test will open a new window, where the address bar writes http://www.paypal.com, but the page is actually displaying content from Secunia).

Click On This Link

You are vulnerable, if a new window is opened displaying a Secunia page, but the address bar is displaying http://www.paypal.com.

Saft Lite is a free Safari plug-in that will fix this problem in waiting for Apple to release a security update. Saft Lite requires Safari version 1.2.4 (v125.12).

There is no workaround known for other browsers.