Re: SpecificMAIL Technical Brief

[Skip Carter <skip () taygeta com>]

> SpecificMAIL Outlook Spam Filter Technical Brief
>
> July 22, 2004; August 10, 2004
>
> SpecificMAIL (www.specificmail.com) is a free Outlook / Outlook
> Express spam filter that utilizes a proprietary online spam database
> to help keep your inbox clean of spam. SpecificMAIL is much more
> than a spam filter; initial tests show that SpecificMAIL should be
> classified as spyware/adware. SpecificMAIL’s EULA and privacy policy

> In the following email, a message was sent to the user of
> SpecificMAIL (customer@) from the mock address onlinebank@. The

> 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 33 2e 30 20 nt: Mozilla/3.0
> 28 63 6f 6d 70 61 74 69 62 6c 65 29 0d 0a 48 6f (compatible)..Ho
> 73 74 3a 20 77 77 77 2e 73 70 65 63 69 66 69 63 st: www.specific
> 6d 61 69 6c 2e 63 6f 6d 0d 0a 41 75 74 68 6f 72 mail.com..Author
> 69 7a 61 74 69 6f 6e 3a 20 42 61 73 69 63 20 63 ization: Basic c
> 33 42 6c 59 32 6c 6d 61 57 4e 74 59 57 6c 73 4f 3BlY2lmaWNtYWlsO
> 6a 45 79 4d 7a 51 32 4e 51 3d 3d 0d 0a 0d 0a    jEyMzQ2NQ==....

Even though the passwords encoded in the HTTP Authorization strings
are trivial to decode.  The one in THEIR string
c3BlY2lmaWNtYWlsOjEyMzQ2NQ==  is probably a pretty good indication
of a company wide lax attitude about passwords.


Skip


-- 
 Dr. Everett (Skip) Carter      Phone: 831-641-0645 FAX:  831-641-0647
 Taygeta Scientific Inc.        INTERNET: skip () taygeta com
 1340 Munras Ave., Suite 314    WWW: http://www.taygeta.com
 Monterey, CA. 93940