(about web-based e-mail)
Hotmail is a great thing! Mainly for having an address to pop into
every 'enter email address here' box on websites (even for downloading
Real Player), so it can suck down SPAM, instead of my main account
doing it. Also great for getting newsletters (CNET Digital Dispatch -
weekly... HTML formatted, and grateful).

-Andy
[Proudly created with: The Bat! v1.53d]
[Surfing has never been better: Opera 5.12]
{Homepage: http://go.to/ucffool/}
- - - - -

Thursday, August 09, 2001, 1:08:30 PM, you wrote:

MDP> -----BEGIN PGP SIGNED MESSAGE-----
MDP> Hash: SHA1

MDP> Hi Igbar,

MDP> On 09 August 2001 at  09:42:30 -0700 (which was 17:42 where I live)
MDP> Igbar Foosenhopper wrote to Dave Gorman and made these points:

IF>> Could you explain to me how HTML is a security risk.  Please give
IF>> me the HTML commands which pos the risk.

MDP> Here's a couple for you:

MDP> <img src=....>
MDP> <script language=....>

MDP> The acquisition of an external image is a huge security risk, opening
MDP> a direct channel between your PC and the host. It's okay when you're
MDP> browsing, but when you're reading mail? No thanks! Email reading is an
MDP> off-line activity. Browsing is an online one. <rant> HTML mail is an
MDP> unacceptable cross-over of the two separate domains and is an
MDP> abomination which should be resisted in any greater form than a simple
MDP> "enriching" mode. Even that is a waste of bandwidth. </rant>

MDP> As for <script ...>, well - did you say hello to "Mellisa" and "I Love
MDP> You", on the way in? Couple that kind of breach with the power of the
MDP> I-SirCam or some such worm and you're in deep trouble.

MDP> Having said that, it is clear that the 1.54 beta series is heading for
MDP> a more comprehensive HTML support and may well introduce some simple
MDP> HTML mail authoring capabilities <sigh>.

MDP> - --
MDP> Cheers -- .\\arck D. Pearlstone -- List moderator and fellow end user
MDP>  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
MDP> \ BrainStorm - free thinking - www: http://www.brainstormsw.com /
MDP>  \ PGP Key ID: 0x929DCDA0  |  www: http://www.silverstones.com /

MDP> TB! v1.54 Beta/5-14F4B4B2 on Windows NT 5.0.2195 Service Pack 2
MDP> -----BEGIN PGP SIGNATURE-----
MDP> Version: GnuPG v1.0.6 (MingW32)
MDP> Comment: GPG Sealed for freshness

MDP> iD8DBQE7csOPOeQkq5KdzaARAvDgAJ9rcGFo5Byr7I/KkIEA8pz48txGCACeNsT5
MDP> oa+07vDWufLJPhs2KQ2MasY=
MDP> =Tmcb
MDP> -----END PGP SIGNATURE-----


-- 
______________________________________________________
Archives   : <http://tbudl.thebat.dutaint.com>
Moderators : <mailto:[EMAIL PROTECTED]>
TBTech List: <mailto:[EMAIL PROTECTED]>
Unsubscribe: <mailto:[EMAIL PROTECTED]>

You are subscribed as : archive@jab.org


Reply via email to