Vista RTM
join:2006-09-13
ChilliwackBC
| Yahoo mail date hack
Is there a way for someone to send mail dated older than present?
I keep getting new mail dated 4-5 days old.
Or is this supposed to trick me ?
 |
|
nwrickert
Premium,MVM
join:2004-09-04
Geneva, IL
 ·AT&T Midwest
| Trivial to do, and not really a hack. The "Date:" header is defined as a user header, so there all a spammer needs is a mail client that allows setting the date header.
Some spammers like to set mail dates to either past or future, so that they will appear near the top of your mailbox listing assuming that they are sorted by date.
No actual security problem here.
--
AT&T dsl; Westell 327w modem/router; SuSE 10.1; firefox 2.0.0.12 |
|
jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR | I'm curious but I thought the date/time headers were established by the sending/receiving smtp/pop servers rather than the email client? Unless of course the sender is using mail server software. |
|
nwrickert
Premium,MVM
join:2004-09-04
Geneva, IL | On my unix system, I can write a simple shell script that creates mail with a "Date:" header of my choice. |
|
jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR | Is that using your own smtp server or sending it through an ISPs? |
|
nwrickert
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T Midwest
| It wouldn't make a difference. The ISP server accepts the date header that is already there. It only adds a date header if one is missing.
Perhaps you are not aware that when you use Outlook Express to send email, the date header is put there by Outlook Express, not by the ISP.
The timestamps in the "Received:" lines are added by the ISP, so those are more trustworthy than the "Date:" header. |
|
joepwpb
Premium
join:2000-12-15
West Palm Beach, FL
| said by nwrickert  :It wouldn't make a difference. The ISP server accepts the date header that is already there. It only adds a date header if one is missing. Perhaps you are not aware that when you use Outlook Express to send email, the date header is put there by Outlook Express, not by the ISP. The timestamps in the "Received:" lines are added by the ISP, so those are more trustworthy than the "Date:" header. nwrickert:
I don't mean to hijack this thread but your reply peaked my interest because I am having a problem with Outlook Express 6 on a Win XP SP2 machine where all of the incoming emails are one hour early. (I have a post on the Comcast forum but the response has been weak) I contacted Comcast and they blew me off and of course I checked the systems time and time zone. Also, I verified the presence of the DST patch that was released last year for the early start of DST.
Do you have any additional information on this issue?
Thanks
Joe P
Note: Please advise if this post is considered thread hijacking and I will delete it and repost. |
|
nwrickert
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T Midwest
| The "Date:" line is normally set in sending system. So for incoming mail, your system should not be relevant.
Some mail reader software displays the time in the local timezone. Not sure if outlook express does that (I rarely use it). That could cause incoming mail to appear to have the wrong time.
--
AT&T dsl; Westell 327w modem/router; SuSE 10.1; firefox 2.0.0.12 |
|
EGeezer
Spring is here
Premium
join:2002-08-04
Central Ohio
clubs:
 ·AT&T CallVantage
 ·RoadRunner Cable
| reply to nwrickert
said by nwrickert :It wouldn't make a difference. The ISP server accepts the date header that is already there. It only adds a date header if one is missing. Perhaps you are not aware that when you use Outlook Express to send email, the date header is put there by Outlook Express, not by the ISP. The timestamps in the "Received:" lines are added by the ISP, so those are more trustworthy than the "Date:" header. I second this observation - I have someone who regularly sends me emails whose system won't run if its clock is later than july or aug 2005. So, all the emails have a 2005 date. I've offered to fix the problem, even free, but no acceptance.
--
Mayors of New York come from nowhere and go nowhere.
Wallace Sayre (apparently, so do governors... ) |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| I have my clock and date set 7 days ahead so I can get the Microsoft updates one week before everyone else.
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
EGeezer
Spring is here
Premium
join:2002-08-04
Central Ohio
clubs: | Does that work for pension and Social Security checks too? And my Beer of the Month club? |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC | It sure does..and every other month you can set it 7 day behind if the keg runs dry. |
|
C DM
join:2002-12-31 | reply to Vista RTM
Not really sure how Yahoo! really fits in. |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI
 ·Clearwire Wireless
·RoadRunner Cable
| reply to Name Game
said by Name Game :I have my clock and date set 7 days ahead so I can get the Microsoft updates one week before everyone else. Good show! Why not just blab about the Microsoft update hack on a public forum? Do you really think this isn't going to trickle down to Microsoft?
You can bet your booties that microsoft will patch up this hole pretty damn quick. They'll probably end up setting their update servers clocks back by one week. If they do that I'm already planning on moving my system clock ahead by an additional week. We know know who to thank when Microsoft rolls out a System Clock Trust Authentication Program.  |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| I plan to set Microsoft's clock back 8 hours once a Day at 4PM Pacific Time so they will work twice as hard to get the updates out twice a month to make all y'all happy..is Tuesday still ok?
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
Vista RTM
join:2006-09-13
ChilliwackBC
| |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| said by Vista RTM : Partnership Interest
Date:29/01/2008
Hello,
I am Mr. Alan Dickson Attorney and financial adviser to Mr. Burke Sean (Late).
I have an urgent and very confidential business proposition for you.
»four19warnings.blogspot.com/2008···est.html
419 scam
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| And BTW if anyone gets popups going to this site 
four19warnings.blogspot.com
You might want to consider installing..
Popup Blocker Version 3.0
Popup Blocker is a Browser Helper Object (BHO) that eliminates all popup and popunder advertisements, including those opened automatically by script.
FREE!!! In fact, an article with complete source code is published on the CodeProject web site.
SIMPLE!!! No need to maintain a black list.
Integrated into the Internet Explorer context menu (right click menu).
Stops popups before they are created.
Contents of popups are not downloaded thereby saving bandwidth.
Optionally play user selectable sound when a popup is blocked.
Override by holding down a user selectable hot key.
Stop GIF and Flash animations.
Stop scripts from resizing the browser.
»www.osborntech.com/pub.htm
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
tempnexus
Premium
join:1999-08-11
Boston, MA | reply to Vista RTM
Damn I guess most of you have missed the Google Gmail Custom Time feature. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| N = Total emails sent
P = Probability that user believes the time stamp
ö = The Golden Ratio
L = Average life expectancy
The term "Every time" is used loosely here to represent the number 10.
That only works north of the mason-dixon line.
said by tempnexus :Damn I guess most of you have missed the Google Gmail Custom Time feature.
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
