-
Risks of bouncing e-mail
many come here wanting to learn how to forge email. its sometimes fun but can be very dangerous.
http://catless.ncl.ac.uk/Risks/21.89.html#subj9
The Strasbourg newspaper "Dernières Nouvelles d'Alsace" reports (in French)
an interesting case of e-mail forgery. The exact circumstances are not yet
clear, but it appears that: - An e-mail was sent from the account of the mayor, telling members of a
city commission to vote in favour of a plan to extend a local hypermarket.
The official, public policy of the city council and the mayor is to oppose
this extension.
- The mail to one member of the commission bounced, because the recipient's
name was incorrectly spelled.
- An assistant to mayor Fabienne Keller, who has access to her mailbox,
noticed the "undeliverable" reply and determined that the mail had been sent
at a time when the mayor could not have sent it.
- The general manager of the hypermarket is under police investigation for
illegal entry into a computer system, forgery, use of forged documents, and
attempted fraud. Original texts in French for those interested: > http://www.dna.fr/cgi/dna/motk/idxli...200201&num=180
> 41610&m1=keller&m2=mairie&m3=
http://www.dna.fr/cgi/dna/motk/idxli...0201&num=19049
910&m1=keller&m2=mairie&m3=
I suppose the RISK is that if you're going to pretend to be someone else,
make sure you can spell !
-
There is a moral in this post somewhere, but I cant work it out...
:)
-
I thinking spoofing is one of those things that you should never use in the manner described (maybe to play a prank on a friend). I am certain the description given above is illeagal, if it isn't will be shortly.
Cheers,
-D
-
==============
There is a moral in this post somewhere, but I cant work it out...
===============
yeah, there is. i just wanted to point out to newbies they need to be careful, people do get in trouble doing this. its all fun til some one looses an eye.
-
-
Two things: Telnet and Open Mail Server
Don't try this at home KiDDieS. Goes to show what happens when you are doing the wrong thing with a puter and you don't have a copy of Websters around... :p
-
Yeah... I got mass-spammed with this one spam message... but the idiot user hadn't used a mail relay that DIDN'T insert his IP address into the message source. It was sort of funny, to think that he plastered evidence of his crime practically everywhere multiple times... He probably never even checked the unsecured server other than to make sure it sent stuff for him.
Can you say public-key-crypto signing, people? :p
