l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
December 2: Social gathering
Next Installfest:
TBD
Latest News:
Nov. 18: Club officer elections
Page last updated:
2003 Sep 26 14:32

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] OT: one of the most pernicious spams i've ever seen.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] OT: one of the most pernicious spams i've ever seen.



FWIW I tried to go to the "unencoded" address below and Netscape fails the
DNS lookup, so that browser doesn't do translation.

Also, it looks like somebody has been listening. I tried to go the the
bogus site just now and received a "document not found" in Russian and
English.

- Larry

At 10:39 PM 9/25/03 -0700, you wrote:
>
>On 2003.09.25 21:53, Rob Rogers wrote:
>> On Thu, Sep 25, 2003 at 20:00:51PM -0700, Mitch Patenaude wrote:
>> Sorry. I was thinking back to my earlier email where I was discussing
>> encoding a domain name to look innocuous. Here was my example:
>> 
>> http://www.citibank.com%2e%61%33%6b%73%64%2e%50%69%53%65%4d%2e%4e%65%54
>> 
>> which unencoded becomes http://www.citibank.com.a3ksd.PiSeM.NeT
>> (using the actual base domain from the original email)
>> 
>>  This much your browser would have to decode to do a DNS lookup, and   
>> I've  never seen a browser show it encoded. Whether or not it sends  
>> it  encoded  in the referer, I can't speak with any authority, but I  
>> highly doubt  it  does. As for anything after the servername and/or  
>> port #, I realize  it  does send that encoded. I appologize for not  
>> making myself clear at  first.
>
>The browser doesn't decode this anywhere. If you try to connect to  
>http://%61mazon.com/ that's exactly what it will try to look up the IP  
>address for so that it can connect. Not "amazon.com". %encoding is just  
>a clever hack to send data to a server, not an "official" alternate way  
>of specifying the location of a document.
>
>--
>I usually have a GPG digital signature included as an attachment.
>See http://www.gnupg.org/ for info about these digital signatures.
>My key was last signed 6/10/2003. If you use GPG, *please* see me about
>signing the key. ***** My computer can't give you viruses by email. ***
>
>Attachment Converted: "e:\eudora\attach\Re [vox-tech] OT one of the m1"
>

_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.