[1522] in WWW Security List Archive
Re: JavaScript to grab email (fwd)
daemon@ATHENA.MIT.EDU (George Spafford)
Thu Feb 22 15:08:07 1996
Date: Thu, 22 Feb 1996 11:21:40 -0500
To: "Daniel L. Smith" <dls@JavaJoint.com>
From: George Spafford <gspaff@execpc.com>
Cc: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
>From: Jyri Kaljundi <jk@digit.ee>
>To: cypherpunks@toad.com
>Subject: JavaScript to grab email
>Date: Tue, 20 Feb 1996 16:33:21 +0200 (EET)
>
>Another annoying feature in JavaScript and Netscape. Have a look at
><http://www.popco.com/grabtest.html>
Well, if you want to take an Orwellian perspective, a person could write a
script in Java to access all kinds of information on the local drive(s),
even take it a step further and gather information from all attached drives
the host has rights to. People got upset about Prodigy and their antics a
couple of years back - I'm not sure how they will react to scripts that
gather information from the local computer covertly.
--G--
George Spafford
Interlink Publishing
1301 Harrison Avenue
Saint Joseph, MI 49085
USA
E-mail: gspaff@execpc.com
il@execpc.com
WWW: http://www.execpc.com/~il
Down the pipe, through the filters, off the censor . . . there was nothing
left but noise.
