[1553] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: JavaScript to grab e-mail

daemon@ATHENA.MIT.EDU (Paul Rarey)
Mon Feb 26 23:35:38 1996

From: Paul Rarey <Paul.Rarey@Clorox.com>
Date: Mon, 26 Feb 1996 17:20:43 -0700
In-Reply-To: Dennis Boone <drb@burrow.cl.msu.edu>
        "Re: JavaScript to grab e-mail" (Feb 26, 16:30)
Reply-To: Paul Rarey <Paul.Rarey@Clorox.com>
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu

On Feb 26, 16:30, Dennis Boone wrote:
> Subject: Re: JavaScript to grab e-mail
>
>Entering un-useful addresses in the Netscape config was suggested as a
>damage-limiting tactic.  Unfortunately, Netscape dutifully encodes the
>sender field using data it gathers from the system (i.e. userid and
>hostname).

Ahhhh...... You presume Unix no...?  One can enter a bogus Email address in the 
Windows(3.1/95) version(s). In fact, it is a small "problem" when users don't 
know about the differences between "<", ">", "(", ")" & "@". 

>I'm strongly tempted to quit using Netscape until they fix this.

U&ME...  

-- 

Cheers!

[ psr ]


home help back first fref pref prev next nref lref last post