Full Disclosure mailing list archives

Re: BGSOUND - redux

From: "Jimmy Sadri" <jimmys () myesn com>
Date: Fri, 8 Aug 2003 21:29:16 -0700

You don't need the <bgsound> tag to do tracking of ip addresses, all you
have to do
is include a jpeg or some other pic embeded in html and it will do the same
thing.

----- Original Message ----- 
From: "morning_wood" <se_cur_ity () hotmail com>
To: <full-disclosure () lists netsys com>
Sent: Friday, August 08, 2003 9:02 PM
Subject: [Full-disclosure] BGSOUND - redux

heh... the spammers found out... luckily for me its just a nice melody. of
note is the use of this for tracking ip addresses, etc via the remote
<bgsound> tag

example from my mail
================

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40"; xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office"><HEAD><TITLE>¿Ë·RªºªB¤Í</TITLE>
<META http-equiv=Content-Language content=zh-tw>
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<META content=FrontPage.Editor.Document name=ProgId>
<META http-equiv=Content-Type content="text/html;
charset=iso-8859-1"><BGSOUND
balance=0

src="http://mychannel.pchome.com.tw/channel/class/show_preview.php3?d=2002-

09-17&amp;enname=0410&amp;t=.mid&amp;fn=music&amp;view=1"
volume=-600 loop=infinite>
<STYLE></STYLE>
</HEAD>

so here we have email address validation / ip matching capabilities

through

<bgsound> tag.

damn spam ( got some ham? )
hmmm... makes me miss Hawaii   -= Spam® =-

morning_wood
http://e2-labs.com





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

BGSOUND - redux morning_wood (Aug 08)
- Re: BGSOUND - redux Jimmy Sadri (Aug 08)