Re: Capturing E-Mail Address of

To: www-security@ns2.rutgers.edu
Subject: Re: Capturing E-Mail Address of
From: Jeff Weinstein <jsw@netscape.com>
Date: Mon, 01 Apr 1996 22:14:41 -0800
Organization: Netscape Communications Corp.
References: <15aa23a0@mail.bl.uk> <315C31F5.571B@cup.hp.com>
Reply-To: jsw@netscape.com

Gene Ingram wrote:
> Quick question:  If I suspect a site *might* try to extract my email
> address and I haven't yet upgraded my Windows 3.1 version of Netscape
> Navigator 2.0 (at home) to 2.01, can I go and delete my email address
> from Options Mail and News Preferences before hitting the site, to
> thwart their effort?  Or is this capturing of email address bug in
> JavaScript using some mail authentication scheme to capture the email
> address of the unknowing site-hitter, independent of the email address I
> placed in Options Mail and News Preferences?  Thanks.

  The way that the JavaScript e-mail grabber gets your e-mail address is
that it causes mail to be sent from your navigator to their site.  If you
remove the email address preference, or remove the mail server host, you should
be able to disable this bug.

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.

References:

Re: Capturing E-Mail Address of

From: Mike.Bremford@mail.bl.uk (Mike Bremford)

Re: Capturing E-Mail Address of

From: Gene Ingram <gene@hpfsvr01.cup.hp.com>