Resending [Phishing net and international characters]
MailScanner at ecs.soton.ac.uk
Sat Aug 27 11:05:20 IST 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
How is MailScanner going to know that %E9 is the same as é ?
Denis Beauchemin wrote:
> Hello Julian,
> Someone told me that our phishing net believes ALL accented characters
> are bad, as seen here:
> <a href="http://www.%E9.com"><font color="red"><b>MailScanner
> soupçonne le lien "www._BAD_.com" d'être une tentative de
> fraude de la part de</b></font> www.é.com</a><br>
> The source of the message was:
> <a href="http://www.%E9.com">www.é.com</a>
> I know there are many vulnerabilities with IDN, but they will probably
> get mainstream soon. I found this article about Netscape 7 that dates
> back July 2003:
> So, is this a bug in MS or a desing decision?
> Thanks again!
> PS: I sent this message 2 hours ago and I still haven't seen it back...
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner