|
PureBytes Links
Trading Reference Links
|
Gwenaël has just shown how easy it is to assume someone elses identity. I
tried this with my own email addresses and was able to do the same thing.
The reason this works is that a password for an email address is not
required, or checked when mail is sent - only when mail is recieved.
By looking at the transmission details of the unsubcribe message sent to you
by Gwenaël (not the real one <g>), I think you should be able to get the
email address of the true sender.
An extra email confirming that you wish to unsubscribe from the list would
make unwanted removals more difficult to do.
Regards
Simon Trevor
>THIS IS A TEST TO SEE IF I CAN ASSUME YOUR IDENTITY.
>
>Dear John,
>
>Please forgive me, but I had to try to see if it works. I just deleted
>my own name address and put yours in, in my options window. To be sure I
>did not include your end of message text file but could have done so as
>well.
>
>Instead of "THIS IS A ID TEST", one can easily imagine another message
>starting with "unsusb... RT"...
>
>If it works, you should check into changing procedures!
>
>Friendily, :-)
>
>Gwenaël Gautier
>
>
>
|