HTML e-mail open to 'wiretaps'
An Internet privacy group warned last week that HTML e-mail can be rigged so that the sender can see whatever recipients write when forwarding the message to others.
This capability, likened by The Privacy Foundation to a wiretap, affects HTML e-mail programs that run JavaScript, a widely used scripting language for Web pages. These programs include Microsoft Outlook 2000, Outlook Express 5.0 and Netscape Messenger 6.0.
Users can protect themselves by shutting off JavaScript in their e-mail readers. But the embedded JavaScript "wiretap" in a message can still work if the message is forwarded to someone who has JavaScript turned on.
Richard Smith, CTO for the Denver privacy group, uncovered the vulnerability while conducting Web research. He credits programmer Carl Voth with first documenting the ability of JavaScript to intercept e-mail text in 1998.
The group has called for Microsoft and others to rework their programs so that JavaScript is off unless a user turns it on.
The complete report is available here.
Network World
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
