Resending [Phishing net and international characters]

[Scott Silva]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Julian Field spake the following on 8/27/2005 3:05 AM:
> How is MailScanner going to know that %E9 is the same as é ?

I don't think it is the literal &eacute, but a capital "E" with an acute
symbol above it. %E9 should map to code 201, but with all the character
sets floating around the planet, I think this would be a tough nut to crack.
> Denis Beauchemin wrote:
> 
>> Hello Julian,
>>
>> Someone told me that our phishing net believes ALL accented characters
>> are bad, as seen here:
>> <a href="http://www.%E9.com"><font color="red"><b>MailScanner
>> soup&ccedil;onne le lien "www._BAD_.com" d'&ecirc;tre une tentative de
>> fraude de la part de</b></font> www.&eacute;.com</a><br>
>>
>> The source of the message was:
>> <a href="http://www.%E9.com">www.&eacute;.com</a>
>>
>> I know there are many vulnerabilities with IDN, but they will probably
>> get mainstream soon.  I found this article about Netscape 7 that dates
>> back July 2003:
>> http://devedge-temp.mozilla.org/viewsource/2003/idn/index_en.html
>>
>> So, is this a bug in MS or a desing decision?
>>
>> Thanks again!
>>
>> Denis
>> PS: I sent this message 2 hours ago and I still haven't seen it back...
>>
> 


-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!