[thelist] Email Obfuscation may be beaten?

John C Bullas (soton.ac.uk relay) jcbullas at nildram.co.uk
Fri Jan 30 04:46:19 CST 2004


At 10:15 30/01/2004, you wrote:
>Deep in my personal site, I have some "Email Obfuscation" techniques, the 
>best I believe is the ASCII encoded one:
>http://www.liamdelahunty.com/tips/email_obfuscation_for_spambots/spambot_03.php

Not withstanding any luddites who don't have javascript running, I have 
found my use
of javascript "munging" to be 100% effective, it is easy to generate as the 
code is in plain text

I sacrificed possible (not proven) "botty" exposure to ease of use.....

FB


>What this does is translate all the characters to their ASCII equivalent 
>and create a link thus:
><a href="mailto:&#100;&#97;....>&#100;&#97;</a>
>
>This should be viewable in browsers, but the spambots don't/didn't pick it up.
>
>Now, on the page above I have an example email link to a fictitious user 
>on my server, which my procmail filter keeps an eye out for. I've received 
>a MyDoom email to that address; so I was wondering if either, someone has 
>put that email in their address book, or have spambots finally started 
>reading ASCII?
>
>I think the former, but was wondering if anyone else uses the ASCII 
>technique and have had 'real' spam to the address.

******************* John C Bullas **************
Homepage: http://www.soton.ac.uk/~johnb/
Blog: http://freeroller.net/page/johnbullas/Weblog
**** Eudora Mail 6.0.0.22  + McAfee Virus Scan 4.5.1 ****



More information about the thelist mailing list