, December 18, 2003 5:42 PM
Subject: Re: Hiding an Email Address from harvesters
I know that, but how is it any easier to update?
- Original Message -
From: Samuel Neff
To: CF-Talk
Sent: Thursday, December 18, 2003 6:06 PM
Subject: RE: Hiding an Email Address from harvesters
hmm... a text file
How are they able to harvest email addresses from CFMAIL tags?I don't
understand how this would even be possible if the page is coded properly?
Anyway, if you want to hide the email address, set it as a variable in
the application.cfm and then call the variable from the CFMAIL tag.
Pete
Les
From: Pete Ruckelshaus [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Subject: Re: Hiding an Email Address from harvesters
Date: Thu, 18 Dec 2003 10:12:58 -0500
How are they able to harvest email addresses from CFMAIL tags?I don't
understand how this would even be possible
If these email addresses are being pulled from a database or a list and
using CFMail to send them I don't see how this is possible. I would
think the only way they could get the emails was if you had a page
displaying the email addresses.
Ben
-Original Message-
From: Les Mizzell
Dan Farmer wrote:
Better yet, why not write an application that will infinate loop and create
a bogus email address within each repition of the loop. That will get em!!!
Use of server resources is a concern.Better to give them a couple of
hundred, then give the server a second or two to rest
Pete Ruckelshaus wrote:
How are they able to harvest email addresses from CFMAIL tags?I don't
understand how this would even be possible if the page is coded properly?
I don't exactly know, but the harvesters are getting smarter and
smarter. I did a test page with a standard CFMAIL on it,
]
Sent: Thursday, December 18, 2003 10:24 AM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
Pete Ruckelshaus wrote:
How are they able to harvest email addresses from CFMAIL tags?I
don't
understand how this would even be possible if the page is coded
properly?
I don't exactly know
Mizzell [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 10:24 AM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
Pete Ruckelshaus wrote:
How are they able to harvest email addresses from CFMAIL tags?I
don't
understand how this would even be possible if the page
A lot of spammers take a domain and send email to all the likely users on
that domain in the hope it is an actual address
e.g [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
What was the address you used for your test?
Neil
I don't exactly know, but the harvesters are getting smarter
Message-
From: Les Mizzell [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 10:24 AM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
Pete Ruckelshaus wrote:
How are they able to harvest email addresses from CFMAIL tags?I
don't
understand how this would even be possible
Ben Densmore wrote:
Are you hardcoding an email address into the CFMail tag? That may be
possible for someone to sniff out the email address that way, but if the
email is set as a variable I can't see how they would get the email
address.
I've got a number of smaller clients/sites that only
: Thursday, December 18, 2003 10:24 AM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
Pete Ruckelshaus wrote:
How are they able to harvest email addresses from CFMAIL tags?I don't
understand how this would even be possible if the page is coded properly?
I don't exactly know
What was the address you used for your test?
[EMAIL PROTECTED] !!!
--
Les Mizzell
-
Mihi placent, O Pincerna!
Virent ova! Viret perna!
Dapem posthac non arcebo.
Gratum tibi me praebebo.
[Todays Threads]
[This Message]
[Subscription]
[Fast Unsubscribe]
[User
On Thursday 18 Dec 2003 15:02 pm, Les Mizzell wrote:
There's some really good _javascript_s out there to protect an email
address in a standard MAILTO: link, but the harverters are also
grabbing addresses from CFMAIL tags.
Can you post an example URL where you think an email address has ben
no way. not possible. only way, if that cfmail tag sent out an email to
someone, it got to their address book, and then thataddress book was
compromised.
...tony
tony weeg
senior web applications architect
navtrak, inc.
www.navtrak.net
[EMAIL PROTECTED]
410.548.2337
-Original Message-
I've used the emailAntiSpam UDF available at
http://www.cflib.org/udf.cfm?ID=405 for a while and have not had SPAM
issues with those email addresses.
Still, the variable thing is a good way to go.
Pete
Les Mizzell wrote:
Ben Densmore wrote:
Are you hardcoding an email address into the
I use the EmailAntiSpam UDF from cflib.org, that replaces the email
addresses with their ascii equivalents.
How can the harvesters see CFMAIL code? That gets processed server side and
never goes anywhere near a client browser?
Jb.
-Original Message-
From: Les Mizzell [mailto:[EMAIL
Andrew Spear wrote:
There is no way a harvester to getting your email via CFMAIL as it is
parsed on the server and never returned to the browser.The only way
would be if they obtained access to your server and were able to look at
your source code.Can you post the URL to the page that
And you wonder why you got spam
Neil
cfmail
to=[EMAIL PROTECTED]
[Todays Threads]
[This Message]
[Subscription]
[Fast Unsubscribe]
[User Settings]
Original Message:
From: Les Mizzell [EMAIL PROTECTED]
cfmail
to=[EMAIL PROTECTED]
from=Some Spammer
subject=SPAM HARVESTER ALERT
type=html
server=MyServerInfoHere
address = #cgi.remote_addr#br
host = #cgi.remote_host#br
referer = #cgi.http_referer#br
agent = #cgi.http_user_agent#br
.
[EMAIL PROTECTED]
-Original Message-
From: Scott Brady [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 11:57 AM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
Original Message:
From: Les Mizzell [EMAIL PROTECTED]
cfmail
to=[EMAIL PROTECTED]
from=Some
Is that e-mail the one you're suggesting is spam?
No, what I'm saying is that AFTER posting the page, the email address
[EMAIL PROTECTED] started getting SPAM messages.
The lovely Manga RX+ Penis Patch Spam, Mortgage Loans, the whole bit
The only place the address above was EVER posted
On Thursday 18 Dec 2003 16:44 pm, Les Mizzell wrote:
Here's my test code.I've already shut down the email address used.
cfmail
to=[EMAIL PROTECTED]
I spamBot could guess that username, I suspect.
Google doesn't find that domain at all though.
--
Tom Chiverton
Advanced ColdFusion Programmer
cfmail
to=[EMAIL PROTECTED]
from=Some Spammer
subject=SPAM HARVESTER ALERT
type=html
server=MyServerInfoHere
I will run a new test with another, MUCH less obvious email address.
Will report back after getting results, or lack of.
--
Les Mizzell
-
Mihi
Les Mizzell said:
Is that e-mail the one you're suggesting is spam?
No, what I'm saying is that AFTER posting the page, the email
address[EMAIL PROTECTED] started getting SPAM messages.
If those events are related, you have a bigger security problem as
just some spam.
However, it picked up
6.1 and PHP
==
If you are not satisfied with my service, my job isn't done!
- Original Message -
From: Pete Ruckelshaus [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 9:12 AM
Subject: Re: Hiding an Email Address from
==
If you are not satisfied with my service, my job isn't done!
- Original Message -
From: Les Mizzell [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 9:22 AM
Subject: Re: Hiding an Email Address from harvesters
| Dan
And if you are really serious about preventing spam, use real email
adresses and set up automatic SpamCop, ORBS, NANAS etc. submissions
for everything that hits those addresses.
The page I'm working on is still beta. When finished, the email
addresses generated won't look so false.Wpoison
, CFMX 6.1 and PHP
==
- Original Message -
From: Les Mizzell [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 3:38 PM
Subject: Re: Hiding an Email Address from harvesters
| And if you are really serious about preventing
I use the following UDF (from www.cflib.org) that envrypts the email while
still being a valid, clickable address:
cfscript
/**
* When given an email address this function will return the address in a
format safe from email harvesters.
* Minor edit by Rob Brooks-Bilson ([EMAIL PROTECTED])
*
I also block all mail harvest bots that I can identify. most especially
the ones that try to ignore the robots.txt files.
So, without direct access to the server, there's a way in the
application and robots.txt files that I can block specific IP addresses
or bots from a specific sites?
Mizzell [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 5:38 PM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
I also block all mail harvest bots that I can identify. most especially
the ones that try to ignore the robots.txt files.
So, without direct access
How is a text file any easier to update than an application.cfm file?
- Original Message -
From: Samuel Neff
To: CF-Talk
Sent: Thursday, December 18, 2003 5:47 PM
Subject: RE: Hiding an Email Address from harvesters
You can do it in your application.cfm file.I did this on our blog
in the application.cfm template u can do this
!--- see if user has been banned ---
cfquery name=qban datasource=#dsn#
SELECT * FROM banned
/cfquery
!--- set users IP ---
cfset IP = #CGI.REMOTE_ADDR#
cfloop query=qban
cfif #IP# EQ #qban.IP#
cflocation url="" addtoken=no
cfabort
/cfif
/cfloop ---
I subscribe to the news.grc.com newsgroups and you can get a lot of information
from there.
- Original Message -
From: Les Mizzell [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 4:37 PM
Subject: Re: Hiding an Email Address from harvesters
| I also
A good place to start is the top 100 list maintained by http://www.sans.org
- Original Message -
From: Samuel Neff [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 4:47 PM
Subject: RE: Hiding an Email Address from harvesters
| You can do it in your
hmm... a text file is just a list of IP's.A cfm file is executable
programming code.
Sam
-Original Message-
From: Daniel Farmer [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 5:51 PM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
How is a text file any
I would apply some sort of Session variable after the user has been checked
otherwise this code would be executed for every single page request in the
application.
Peter Tilbrook
Transitional Services - Enterprise eSolutions
Centrelink (http://www.centrelink.gov.au)
2 Faulding Street
Symonston
yup, that way they cant skip over the home page and get in ;)
that code i just took out of another site that was meant to keep the
banned ppl out of the site completely. Im sure there are better ways but
hey it works
if the spammers are sending out spiders then you would want to cover the
whole
Les Mizzell wrote:
4. I want to do more than just report or filter these jerks.
This is why I'm experimenting with various BOT KILLER
type pages.If I can choke/stop a bot or clog somebodies
database with useless addresses, the more the better. I'm
obviously still experimenting here too.
Tip:
PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Thursday, December 18, 2003 6:20 PM
To: CF-Talk
Subject: Re: Hiding an Email Address from harvesters
I would apply some sort of Session variable after the user has been checked
otherwise this code would be executed for every single page request
I know that, but how is it any easier to update?
- Original Message -
From: Samuel Neff
To: CF-Talk
Sent: Thursday, December 18, 2003 6:06 PM
Subject: RE: Hiding an Email Address from harvesters
hmm... a text file is just a list of IP's.A cfm file is executable
programming code.
Sam
42 matches
Mail list logo
