[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] BGSOUND - redux 

You don't need the <bgsound> tag to do tracking of ip addresses, all you
have to do
is include a jpeg or some other pic embeded in html and it will do the same
thing.

----- Original Message ----- 
From: "morning_wood" <se_cur_ity@hotmail.com>
To: <full-disclosure@lists.netsys.com>
Sent: Friday, August 08, 2003 9:02 PM
Subject: [Full-Disclosure] BGSOUND - redux


> heh... the spammers found out... luckily for me its just a nice melody. of
> note is the use of this for tracking ip addresses, etc via the remote
> <bgsound> tag
>
> example from my mail
> ================
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML xmlns="http://www.w3.org/TR/REC-html40"; xmlns:v =
> "urn:schemas-microsoft-com:vml" xmlns:o =
> "urn:schemas-microsoft-com:office:office"><HEAD><TITLE>¿Ë·RªºªB¤Í</TITLE>
> <META http-equiv=Content-Language content=zh-tw>
> <META content="MSHTML 6.00.2600.0" name=GENERATOR>
> <META content=FrontPage.Editor.Document name=ProgId>
> <META http-equiv=Content-Type content="text/html;
> charset=iso-8859-1"><BGSOUND
> balance=0
>
src="http://mychannel.pchome.com.tw/channel/class/show_preview.php3?d=2002-
> 09-17&amp;enname=0410&amp;t=.mid&amp;fn=music&amp;view=1"
> volume=-600 loop=infinite>
> <STYLE></STYLE>
> </HEAD>
>
> so here we have email address validation / ip matching capabilities
through
> <bgsound> tag.
>
> damn spam ( got some ham? )
> hmmm... makes me miss Hawaii   -= Spam® =-
>
> morning_wood
> http://e2-labs.com
>
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html