subject: HTML-enabled email posted: Thu, 12 Oct 2000 02:43:05 +0100
OK
Haven't you people heard of embedded javascripts that steal your
cookies??? Who knows what else can be embedded? Get a clue
and send email in plaintext. That way there can be no
skullduggery at all. And your email is 1-third the size. But yes,
you do lose those pretty fonts and colours. Such a shame that
window-dressing can be poisonous!!!!!
Actually, MY email reader doesn't execute any scripts at all... but
does YOURS???
Those insisting on sending HTML-enabled email should expect to
be attacked, since all their emails usually translate into "I am using
a hackable box".
If I was using any version of Outlook, for example, I would be
shitting bricks everytime someone sent me an HTML-encoded
email. Of course, I don't get to think that until later, because it
doesn't usually ask before executing it!!! Disable WSH? What is
WSH?? What about PWS? DCOM? ActiveX? Javascript? What
about executable HTML files, eg .HTA? I'll put ten pounds most
folks reading this haven't even heard of some of that stuff. Yet
each bit not only exists, but contains vulnerabilities, and is
probably installed on the computer you're using to read this email.
All of which suits Script Kiddie right down to the ground.
Hmm, now what if Script Kiddie was to, say, be employed by, say,
one of your competitors????
<a href="Get the picture?.jpg.vbs">CLICK HERE AND WIN!</a>
.. or was that <EMBED SRC=http://attacker.com/script.js> ??
.. how about <EMBED SRC=http://attacker.com/script.j%53> ?
Besides, the only people who use it are spammers. What sort of
twit is going to sit there and encode each
message? It's a fucking email, not a sales pitch -- except if you're
a spammer of course. Now, where was it that HTML-enabled email
appeared? Microsoft? Spammer? Never. Never would they ever
add a feature to their software specifically to make it easier to sell
things. And then expose the world to their stupidity when the
chalice, a script-enabled email reader, turns out to be poisoned!!!
The reason we have I Love You is because Microsoft Love
Themselves.
You can continue this marketing effort by sending HTML-encoded
emails. Or you can stop supporting a monster that was found
guilty of predatory behaviour.
Your Call ....
Stuart
(who has also posted this to the Tucana list, just in case anyone
was even thinking of enabling it in their Outlook Options.. maze-of-
different-dialog-boxes-depending-on-which-version-of-twenty-
different-components-you-have.. and then click OK.)
generated by msg2page 0.06 on Jul 21, 2006 at 19:05:06
search: