[22321] in bugtraq

home help back first fref pref prev next nref lref last post

Re: HTML email "bug", of sorts.

daemon@ATHENA.MIT.EDU (Jeffrey W. Baker)
Sun Aug 19 23:44:53 2001

Date: Sat, 18 Aug 2001 20:30:04 -0700 (PDT)
From: "Jeffrey W. Baker" <jwbaker@acm.org>
To: Alex Prestin <wakko@bitey.net>
Cc: <bugtraq@securityfocus.com>
In-Reply-To: <Pine.LNX.4.21.0108180605310.15817-100000@wakko.bitey.net>
Message-ID: <Pine.LNX.4.33.0108182027590.1946-100000@desktop>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Sat, 18 Aug 2001, Alex Prestin wrote:

> So, anyone have any idea of how to deal with this latest little spammer
> toy?  Is there any effective way to filter out web bugs without adversely
> affecting the delivery intact of legitimate messages?  Could software
> change to at least warn viewers that this HTML viewer is accessing offsite
> content?  Is it worth doing?

At least Mozilla mail+news can be configured to alert the user before
downloading any image.  You have the option of loading the image, not
loading the image, and permanently placing a hostname on the image loading
shitlist.

Pine of course does not suffer from this particular bug.

Regards,
Jeffrey


home help back first fref pref prev next nref lref last post