Re: [Eric] Unable to register with issue tracker

[Boylan, Ross]

Can you tell me what the original URL was?

I expect that what's supposed to happen is that the original URL gets escaped 
as necessary (aka "mangled"), tacked on at the end of a redirect to our 
security service, proofpoint.com, and that when they get the URL they reverse 
the translation, decide if it's OK, and (usually) send it on.  The odd thing 
here was that it was not blocked, but it was messed up.

Is the error message I got from your site what you would expect if the URL were 
used twice?  Maybe if proofpoint.com did a "pre-check" that would explain why 
it failed.
Ross


From: Henrik Pauli 
Sent: Monday, December 9, 2019 3:46 AM
To: Boylan, Ross
Cc: eric@riverbankcomputing.com
Subject: Re: [Eric] Unable to register with issue tracker

Sounds like an issue with your email system than anything else.  Best if you 
take it to your sysadmins.

3D is the ASCII code of the equals sign, so it could be that something mangled 
URL encoding or Quoted-Printable encoding (both use an escape character -- % 
and =, respectively -- and the byte code of the character escaped), and this is 
why whatever you click on doesn't seem to lead anywhere.  If there are URLs 
that are use-once, them checking on them and opening them might be even worse.

On Sat, 7 Dec 2019 at 08:24, Boylan, Ross 
mailto:ross.boy...@ucsf.edu>> wrote:
I tried to create an account with the eric issue tracker; it emailed me a 
message instructing me to click on a link to complete the process.  When I did 
so, I reached the site but a banner near the top said 'No such otks 
"wfk4."' where ... represents a long string of characters.

This mailing list also wanted me to click on a URL to confirm, but offered an 
email reply as an alternative, which I think worked.

Our local security software rewrites all URLs in email to route them through 
some security system, but I believe they end up resolving to the original URL, 
which is part of the rewritten URL.  The rewritten URL appears to have 3D 
immediately before the code indicated in the message, and it looks as if 3X 
(where X is various letters) might be some kind of separator.

At any rate, if there's some way to register that would be nice.

Ross
___
Eric mailing list
Eric@riverbankcomputing.com
https://www.riverbankcomputing.com/mailman/listinfo/eric
___
Eric mailing list
Eric@riverbankcomputing.com
https://www.riverbankcomputing.com/mailman/listinfo/eric

Re: [Eric] Unable to register with issue tracker

[Henrik Pauli]

Sounds like an issue with your email system than anything else.  Best if
you take it to your sysadmins.

3D is the ASCII code of the equals sign, so it could be that something
mangled URL encoding or Quoted-Printable encoding (both use an escape
character -- % and =, respectively -- and the byte code of the character
escaped), and this is why whatever you click on doesn't seem to lead
anywhere.  If there are URLs that are use-once, them checking on them and
opening them might be even worse.

On Sat, 7 Dec 2019 at 08:24, Boylan, Ross  wrote:

> I tried to create an account with the eric issue tracker; it emailed me a
> message instructing me to click on a link to complete the process.  When I
> did so, I reached the site but a banner near the top said 'No such otks
> "wfk4."' where ... represents a long string of characters.
>
> This mailing list also wanted me to click on a URL to confirm, but offered
> an email reply as an alternative, which I think worked.
>
> Our local security software rewrites all URLs in email to route them
> through some security system, but I believe they end up resolving to the
> original URL, which is part of the rewritten URL.  The rewritten URL
> appears to have 3D immediately before the code indicated in the message,
> and it looks as if 3X (where X is various letters) might be some kind of
> separator.
>
> At any rate, if there's some way to register that would be nice.
>
> Ross
> ___
> Eric mailing list
> Eric@riverbankcomputing.com
> https://www.riverbankcomputing.com/mailman/listinfo/eric
>
___
Eric mailing list
Eric@riverbankcomputing.com
https://www.riverbankcomputing.com/mailman/listinfo/eric