[dba-Tech] new email attack vector

[Jim Lawrence]

Hmmm... sometimes it might be nice to be able to modify an email after it was sent. ;-)

Having an automated plain text email setting is a must in this day and age. The email client, Zimbra, I am currently using, sends all email in text first and then there is a setting that will allow me to switch the message to HTML. If I see 200 lines of Javascript code revealed or iframes, in the bucket it goes. ;-)
  
Jim

----- Original Message -----
From: "carbonnb" <carbonnb at gmail.com>
To: "Discussion of Hardware and Software issues" <dba-tech at databaseadvisors.com>
Sent: Thursday, August 24, 2017 3:46:00 PM
Subject: Re: [dba-Tech] new email attack vector

Yet ANOTHER reason why HTML email is an evil scourge foisted upon us.

B

On 24 August 2017 at 18:26, John Bartow <jbartow at winhaven.net> wrote:
> I thought our email and list master, Bryan, would find this most interesting but some of you may also:
> http://thehackernews.com/2017/08/change-email-content.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Security+Blog%29&_m=3n.009a.1564.kp0aof74zx.xtk
>
> _______________________________________________
> dba-Tech mailing list
> dba-Tech at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/dba-tech
> Website: http://www.databaseadvisors.com



-- 
Bryan Carbonnell - carbonnb at gmail.com
Life's journey is not to arrive at the grave safely in a
well-preserved body, but rather to skid in sideways, totally worn out,
shouting "What a great ride!"
_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com