forrest-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Clay Leeds <cle...@medata.com>
Subject Re: Email obfustication -- "incorrect"
Date Mon, 23 Feb 2004 22:38:23 GMT
On Feb 23, 2004, at 1:47 PM, Moshe Yudkowsky wrote:
> The email obfustication alorightm works very differently than I'd 
> expect.
>
> It takes "foo@example.com" and changes it to "foo.at.example.com".
>
> The data that I have seen -- experiments with putting email addresses 
> out there -- shows that changing the HTML source from @ to &#40; is 
> sufficient to throw off all current email harvesters; but that method 
> of obfustication lets the browser put up the correct "@" symbol 
> instead of ".at."
>
> Comments?

It's only a matter of time before e-mail harvesters fix their code to 
accommodate &40; etc. It seems like a simple thing to change in a perl 
script (assuming that's what they're using). Perhaps the Forrest's 
obfuscation system might someday give the opportunity to customize it 
(from skinconf.xml):

   <obfuscate-mail-links>true</obfuscate-mail-links>
   <obfuscate-mail-links-char>&40;</obfuscate-mail-links-char>

That way, people could add their own (if they so choose):
   <obfuscate-mail-links-char>.at.</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>-theatsymbol-</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>.a.</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>_a_</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>_at?_</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>!</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>-atthingie-</obfuscate-mail-links-char>
   <obfuscate-mail-links-char>_spam_</obfuscate-mail-links-char>

Of course it would always default to the best thing we can come up 
with, provided <obfuscate-mail-links-char> (or whatever it's called) is 
not set...

Web Maestro Clay


Mime
View raw message