Return-Path: Delivered-To: apmail-xml-forrest-dev-archive@www.apache.org Received: (qmail 52720 invoked from network); 23 Feb 2004 22:41:47 -0000 Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12) by minotaur-2.apache.org with SMTP; 23 Feb 2004 22:41:47 -0000 Received: (qmail 78259 invoked by uid 500); 23 Feb 2004 22:38:17 -0000 Delivered-To: apmail-xml-forrest-dev-archive@xml.apache.org Received: (qmail 78210 invoked by uid 500); 23 Feb 2004 22:38:16 -0000 Mailing-List: contact forrest-dev-help@xml.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: forrest-dev@xml.apache.org Delivered-To: mailing list forrest-dev@xml.apache.org Received: (qmail 78192 invoked from network); 23 Feb 2004 22:38:16 -0000 Received: from unknown (HELO mail.medata.com) (65.104.121.53) by daedalus.apache.org with SMTP; 23 Feb 2004 22:38:16 -0000 Received: from [172.24.2.18] (proc012 [172.24.2.18] (may be forged)) (authenticated bits=0) by mail.medata.com (8.12.8/8.12.8) with ESMTP id i1NMcK8a007433 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NO) for ; Mon, 23 Feb 2004 14:38:20 -0800 Mime-Version: 1.0 (Apple Message framework v612) In-Reply-To: <403A74DC.5060200@bl.com> References: <403A74DC.5060200@bl.com> Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit X-Image-Url: http://homepage.mac.com/webmaestro/.cv/thumbs/me.thumbnail From: Clay Leeds Subject: Re: Email obfustication -- "incorrect" Date: Mon, 23 Feb 2004 14:38:23 -0800 To: forrest-dev@xml.apache.org X-Mailer: Apple Mail (2.612) X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N On Feb 23, 2004, at 1:47 PM, Moshe Yudkowsky wrote: > The email obfustication alorightm works very differently than I'd > expect. > > It takes "foo@example.com" and changes it to "foo.at.example.com". > > The data that I have seen -- experiments with putting email addresses > out there -- shows that changing the HTML source from @ to ( is > sufficient to throw off all current email harvesters; but that method > of obfustication lets the browser put up the correct "@" symbol > instead of ".at." > > Comments? It's only a matter of time before e-mail harvesters fix their code to accommodate &40; etc. It seems like a simple thing to change in a perl script (assuming that's what they're using). Perhaps the Forrest's obfuscation system might someday give the opportunity to customize it (from skinconf.xml): true &40; That way, people could add their own (if they so choose): .at. -theatsymbol- .a. _a_ _at?_ ! -atthingie- _spam_ Of course it would always default to the best thing we can come up with, provided (or whatever it's called) is not set... Web Maestro Clay