Security Basics mailing list archives

RE: www.readnotify.com


From: "Ebeling, Jr., Herman Frederick" <hfebelingjr () lycos com>
Date: Fri, 27 Jan 2006 12:42:49 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----Original Message----
From: Saqib Ali [mailto:docbook.xml () gmail com]
Sent: Friday, 27 January, 2006 11:40
To: hfebelingjr () lycos com
Cc: Joe George; security-basics () securityfocus com
Subject: Re: www.readnotify.com

: :         IF so isn't that a violation of the computer use and abuse (or
: : however it's phrased) act?  And IF so why hasn't anyone done anything
: : about 'em? 
: 
: Are you referring to CFAA (Computer Fraud and Abuse Act)? If so,
: www.ReadNotify.com is not violating anything in CFAA, since they are "NOT
: attacking any computer connected to the internet."
: 
: :         I mean in order for 'em to do some of the things that they
: : claim that they can do, they'd have to install software on another
: : person's computer 
: : WITHOUT that person's knowledge, or permission.
: No software installation required. They are just adding a JavaScript
: to the email.

        Yeah, but isn't adding JavaScript still adding software/code to someone's
computer without that person's permission?  I mean as we all know. 
JavaScript is no longer the safe malicious free programming langue that it
used to be.  And that both it and HTML can be used to cause damage to, or
software installed on someone else's computer?

: 
: :         What steps can the average computer user do from home to block
: : 'em? 
: Use pine (mail reader) and lynx (web browser)

        Is there a version of pine and lynx for the Windows environment?

Herman
Live Long and Prosper
 ___________________          _-_
 \==============_=_/ ____.---'---`---.____
             \_ \    \----._________.----/
               \ \   /  /    `-_-'
           __,--`.`-'..'-_
          /____          ||-
               `--.____,-'

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3 - not licensed for commercial use: www.pgp.com

iQA/AwUBQ9pX/R/i52nbE9vTEQKTMgCdEx0r76ao63yarLkvEmmdTwOQZl8AoOUt
D8D8UVY2w/Wrt95f8OsTko4z
=VR0v
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: