junk mail

[Jay R. Ashworth]

On Fri, Apr 13, 2007 at 04:58:41AM -0400, Fairlight wrote:
> This public service announcement was brought to you by Tom Palmquist:
> > I use Mozilla Thunderbird and the simple act of reading
> > a message causes no issues as you describe. However if
> > there is a link or you respond to such a message, could
> > possibly produce such results.
> > 
> > I'm not familiar with M$'s email or any others, but just
> > reading a message should NOT produce the results you
> > mention. Clicking on links or responding, may.
> > 
> > 'nuff said?
> 
> No.  I seem to recall that Outlook and possibly Express had auto-open
> facilities at least at some point in their version history, whereby
> absolutely no human action other than opening the -message- would open the
> attachments.  Unsure if it's non-defaulted, removed, or still an issue to
> unconfigure, but it was an issue at some point.

In some versions of either Outhouse or Outhouse Exploit (I forget
which) a bug in the library that parsed RFC 822 *date fields* could get
you pwned *even if your preview pane was turned off*.

That one didn't last long.

Cheers,
-- jra
-- 
Jay R. Ashworth                                                jra at baylink.com
Designer                          Baylink                             RFC 2100
Ashworth & Associates        The Things I Think                        '87 e24
St Petersburg FL USA      http://baylink.pitas.com             +1 727 647 1274