Date: Thu, 11 Apr 2002 05:33:05 +0000
From: "Matthew Hanson" <[EMAIL PROTECTED]>
Subject: Re: [LIB] SPAM

>Date: Wed, 10 Apr 2002 21:47:32 -0700
>From: "Renita Herrmann" <[EMAIL PROTECTED]>
>
>I think Digby's onto something. I have, in the last few days, been getting 
>TONS of spam (including porn addressed to ME personally, not good since my 
>10 year old son also uses my connection on occasion), and nothing else has 
>changed except my addition of the Libretto Digest and my account with 
>Ebay....hmmmm...R

Heh... them little tykes do get into mischief on the net these days.  Plus 
10 these days ain't 10 from back in the Coolidge years of... uh... the 
charleston, jazz, and speakeasies.  Hmmm... maybe it was.  Have you thought 
about NetNanny?

I just did a little test on that mailto tag in my HTML files.  With all new 
installations of IE w/latest SP, Netscape 4.79, Win98, and Eudora Pro, now 
I'm getting what looks like a javascript popup window in IE when I run the 
mailto file that says:


---------------------------------------------

"This form is being submitted using e-mail.
Submitting this form will reveal your email
address to the recipient, and will send the
form data without encypting it for privacy.

You may continue or cancel this submission."

                OK      Cancel

---------------------------------------------


When I click OK, Eudora Pro pops up.  Something that Eudora Light never did 
with METHOD="POST" in the <FORM> tag.  Eudora displays another good warning:


---------------------------------------------

"A program is trying to send a message using
MAPI without first letting you see the
contents of the message.  This is a tecnique
that some virus writers have employed in
order to spread the virus.  Would you like to
see the message before it is sent (highly
recommended)."

.       [ ]  Don't remind me again

.                Yes    No

---------------------------------------------

What you then see is a email form with the mailto address in the To: field, 
and a postdata.att file attachment which is created from the form data.

However, I'm sure there are many systems out there with older software where 
these warnings have either been turned off, or didn't exist.  And I'm 
guessing that the IE message above can be disabled.  And if I clicked "Don't 
remind me again" in Eudora Pro, I wonder if Eudora Pro will pop up at all.  
Eudora Light sure never did.  I'm only now learning how I was able to post 
my own email address to my website by filling a form and submitting it, and 
never knew it was sent via Eudora.

I'm still betting that a lot of email addresses are harvested by websites 
set up to run mailto like this.

Who suggested turn off Java?  I've forgotten that I used to do that.  
Unfortunately mailto is pure HTML.

Matt


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.




**************************************************************
http://libretto.basiclink.com - Libretto mailing list
http://www.silverace.com/libretto/ - Archives

                 -------TO UNSUBSCRIBE-------
Reply to any of the list messages. The reply mail should be
addressed to: [EMAIL PROTECTED] - Then replace any text
on the message's subject line: cmd:unsubscribe
              --------TO UNSUBSCRIBE DIGEST------
Do above but with this on subject line: cmd:unsubscribe digest
**************************************************************


Reply via email to