Reading [image/gif] ... aargh

Reading [image/gif] ... aargh

[Robert Bihlmeyer]

Hi,

I just got a spam mail, broken text/html, naturally. Ok, can live with 
that.

But it included an img element, w3 invoked my net-connection, and
started downloading that damned thing. I don't like this, I don't like 
this at all.

Just to let you know. If someone has an easy way to prevent this, I'd
be thankful, too.

	Robbe

-- 
Robert Bihlmeyer	reads: Deutsch, English, MIME, Latin-1, NO SPAM!
<robbe@orcus.priv.at>	<http://stud2.tuwien.ac.at/~e9426626/sig.html>

Re: Reading [image/gif] ... aargh

[Stefan Waldherr]

>>>>> "Robbe" == Robert Bihlmeyer <e9426626@stud2.tuwien.ac.at> writes:

  Robbe> Just to let you know. If someone has an easy way to prevent this, I'd
  Robbe> be thankful, too.


Not within gnus. I use procmail (stripped down to the bare essentials) and the 
Junkfilter (which is very effective).

http://www.zer0.org/~gsutter/junkfilter/

S.
-- 
Stefan Waldherr                   fax +49 431 8058 136
                               e-Mail stefan@waldherr.org
                                  www http://www.waldherr.org/

Re: Reading [image/gif] ... aargh

[William M. Perry]

Robert Bihlmeyer <e9426626@stud2.tuwien.ac.at> writes:

> I just got a spam mail, broken text/html, naturally. Ok, can live with
> that.
> 
> But it included an img element, w3 invoked my net-connection, and started
> downloading that damned thing. I don't like this, I don't like this at
> all.
> 
> Just to let you know. If someone has an easy way to prevent this, I'd be
> thankful, too.

If there is an appropriate hook, you could just set url-standalone-mode to
't' before invoking w3, and back to 'nil' when the drawing was over.

-Bill P.

Re: Reading [image/gif] ... aargh

[Russ Allbery]

William M Perry <wmperry@aventail.com> writes:
> Robert Bihlmeyer <e9426626@stud2.tuwien.ac.at> writes:

>> I just got a spam mail, broken text/html, naturally. Ok, can live with
>> that.  But it included an img element, w3 invoked my net-connection,
>> and started downloading that damned thing. I don't like this, I don't
>> like this at all.  Just to let you know. If someone has an easy way to
>> prevent this, I'd be thankful, too.

> If there is an appropriate hook, you could just set url-standalone-mode
> to 't' before invoking w3, and back to 'nil' when the drawing was over.

Is there some reason not to set url-standalone-mode *always* for rendering
HTML messages in Gnus?  At least in my opinion a mail or news reader
should never initiate network connections on the basis of incoming
messages; that's a security hole just begging to happen.

-- 
Russ Allbery (rra@stanford.edu)         <URL:http://www.eyrie.org/~eagle/>

Re: Reading [image/gif] ... aargh

[Lars Magne Ingebrigtsen]

Robert Bihlmeyer <e9426626@stud2.tuwien.ac.at> writes:

> But it included an img element, w3 invoked my net-connection, and
> started downloading that damned thing. I don't like this, I don't like 
> this at all.

Yup.  Fix in Pterodactyl Gnus v0.77.

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen