Re[2]: OT : HTML privacy risk ??

1999-12-08 Thread Andrew Brown


AM The official release of TB version 1.38 is available at:
AM   ftp://ftp.ritlabs.com/pub/the_bat/the_bat.exe

SOmething cute I just discovered: double click on that link and it fires
up my FTP client and goes to get the file. I knew this worked with http
urls. It's very clever to do it with cuteFTP as well.



 --
Andrew Brown 

running 1.36 on Windows 98
under 4.10

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--




OT : HTML privacy risk ??

1999-12-07 Thread Rob

hi,

i never like HTML in e-mail to start with, but now i'll just disable it ...

just read that the spammers found a new trick ; when you view a message in 
HTML they retrieve an 'invisible' picture from a site and put your e-mail 
address in a cookie ...

http://www.eff.org/pub/Privacy/Profiling/19991202_joint_profiling_pressrel.htm
l
http://www.tiac.net/users/smiths/privacy/cookleak.htm

any idea if TheBat! is also 'leaky' when displaying HTML messages ??

-- 
Rob

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--




Re: OT : HTML privacy risk ??

1999-12-07 Thread Ali Martin

   Rob [EMAIL PROTECTED] wrote:

 i never like HTML in e-mail to start with, but now i'll just disable it ...

 just read that the spammers found a new trick ; when you view a message in 
 HTML they retrieve an 'invisible' picture from a site and put your e-mail 
 address in a cookie ...

 http://www.eff.org/pub/Privacy/Profiling/19991202_joint_profiling_pressrel.htm

 http://www.tiac.net/users/smiths/privacy/cookleak.htm

 any idea if TheBat! is also 'leaky' when displaying HTML messages ??

AFAIK, that's only possible if you are viewing HTML mail with a client
that can access the internet such as OE or Netscape messenger.

TB! will only view HTML and nothing more. The reason why TB! will not
view imbedded images in HTML pages sent, is the same reason why
spammers will not get us through your mentioned method.

See from the latter of the two links you sent:

***=
The basic technique is for an HTML message to include a graphics in an
HTML Email message that is loaded from a Web server belonging to a
banner ad company. This graphics is specified using a standard HTML
IMG tag. For example, this IMG tag will fetch a graphics named
"SYNC.GIF" from a Web server belonging to MyBannerAds.com (a
fictitious company):

   img src="http://www.mybannerads.com/sync.gif

The tag can appear anywhere on the page, and the graphics file,
SYNC.GIF, will be fetched and displayed when the Email address is
read.
   =***==
   
-- 
Ali Martin | Using The Bat! v1.38 Beta/6 
 mailto:[EMAIL PROTECTED]  | Windows NT 4.0 (Service Pack 6)  
   
   [ Borg? Where? I don't se*(#$#..NO CARRIER ]
___

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--




Re: OT : HTML privacy risk ??

1999-12-07 Thread Rob

Hello all,

on Tuesday, December 07, 1999 at 10:28:01 AM, Ali wrote :

 TB! will only view HTML and nothing more. The reason why TB! will not
 view imbedded images in HTML pages sent,

but it does !! someone sent me an e-mail with a background and pictures and
TheBat shows it all ... as long as the stuff is attached to the message.

-- 
Rob ( [EMAIL PROTECTED] )
using The Bat! 1.38 Beta/5 (reg)
and Windows 95 4.0 Build 950 

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--




Re: OT : HTML privacy risk ??

1999-12-07 Thread Ali Martin

   Rob [EMAIL PROTECTED] wrote:

[...]
 TB! will only view HTML and nothing more. The reason why TB! will not
 view imbedded images in HTML pages sent,

 but it does !! someone sent me an e-mail with a background and pictures and
 TheBat shows it all ... as long as the stuff is attached to the message.

That's what I meant actually. Sorry for the misunderstanding.

The official release of TB version 1.38 is available at:
  ftp://ftp.ritlabs.com/pub/the_bat/the_bat.exe

-- 
Ali Martin | Using The Bat! v1.38 Beta/5 
 mailto:[EMAIL PROTECTED]  | Windows NT 4.0 (Service Pack 6)  
   
   [ NUMBER CRUNCHING: Jumping on a Computer. ]
___

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--




Re: OT : HTML privacy risk ??

1999-12-07 Thread Alexander V. Kiselev

Hi there!

On 7 Dec 99, at 23:53, Rob wrote
about "Re: OT : HTML privacy risk ??":

  TB! will only view HTML and nothing more. The reason why TB! will not
  view imbedded images in HTML pages sent,
 
 but it does !! someone sent me an e-mail with a background and pictures and
 TheBat shows it all ... as long as the stuff is attached to the message.

But it won't go to the Net in order to get the stuff that's *not* 
attached! M$IE (LookOut, actually) will, Netscape will, but TB 
won't. That makes it not vulnerable to HTML attacks. Note that 
not only your private data might be collected using HTML, 
HTML can even carry a virus (actually, VBA script as a part of 
HTML page, and thus only M$IE is vulnerable --- but then, the 
Mozilla projects seems to support this too along with heaps of 
other HTML4-specific idiotic features), which makes it quite an 
insecure thingy...

-- 
SY, Alex
(St.Petersburg, Russia)
http://mph.phys.spbu.ru/~akiselev
--- 
Thought for the day:
  Double your drive space! Delete Windows!

--- 
PGP public keys on keyservers:
0xA2194BF9 (RSA);   0x214135A2 (DH/DSS)
fingerprints:
F222 4AEF EC9F 5FA6  7515 910A 2429 9CB1 (RSA)
A677 81C9 48CF 16D1 B589  9D33 E7D5 675F 2141 35A2 (DH/DSS) 
--- 

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--