RE: Intel.com Mailing List Arbitrary Address Removal Link

[Knud Erik Højgaard <knud () cybercity dk>]

[original posting snipped up with crooked scissors]

cnn.com has similar stuff with their mailing lists. The best 
part about their lists is that they require no 'approval' of 
joining the list - they just start sending you mails. Always great coming back from a holiday just to see your mailbox 
flooded with a few hundred mails. 

useless side note: cnn is completely unresponsive to requests like 'what ip submitted the ´join´ request' 'please block 
my address from your list' etc. - perhaps one should just ignore mails from cnn.com - but perhaps the president will 
contact me one day when he's at cnn :)

-Knud
 
> -----Original Message-----
> From: E M [mailto:rdnktrk () hotmail com]
> Sent: 6. februar 2002 01:16
> To: bugtraq () securityfocus com

> While Intel requires you to login to modify account 
> information, it does not 
> require you to login to remove your e-mail (or any e-mail) 
> from its mailing 
> list database.
>
> .: Example :.
>
> To Remove someone () domain com
> http://intel.m0.net/m/u/ien/i.asp?e=someone%40domain.com
>
>
> Removal of users from Mailing List without authorization.
>   - Low
>
>
> An oversight which should be resolved by requiring login prior to 
> unsubscription from the list.