From: Jeff Barber <jeffb@sware.com>
Date: Wed, 21 Feb 1996 12:46:27 +0800
To: markm@voicenet.com (Mark M.)
Subject: Re: JavaScript to grab email
In-Reply-To: <Pine.LNX.3.91.960220141458.485A-100000@gak>
Message-ID: <199602202014.PAA01389@jafar.sware.com>
MIME-Version: 1.0
Content-Type: text/plain


Mark M. writes:

> On Tue, 20 Feb 1996, Mike Rose wrote:
> 
> > >Probably there will soon be thousands of pages which include this code,
> > >and people using Netscape 2.0 will be spammed with commercial messages.
> > >So just put some false e-mail address in your Netscape browser to disable
> > >this feature.
> >
> > Changing the email address known to netscape doesn't help.  Your email
> > address is in the message sent, regardless of what netscape thinks
> > your identity is.
> 
> I'm not sure I understand what you are saying.  The Javascript program
> uses Netscape to send the e-mail.  The only way Netscape knows your actual
> e-mail address is if you tell Netscape what it is.  The comments on the
> page tell you that deleting your e-mail address from Netscape's config, or
> supplying it with a false one, prevents the script from working.  I visited
> the page using a fake e-mail address, and have yet to be sent a confirmation
> e-mail.

On my system (Linux), the "Sender: " header contains my address no matter
what I set my address too.


-- Jeff