(keitai-l) Re: Phone Number Transmission when conneting with iMode

From: Juergen Specht <js_at_anima.de>
Date: 08/28/00
Message-ID: <39AA463E.E31D0007@anima.de>
dc wrote:
> This sounds like vanity license plates or kiddie pager talk:
>         B=8 ,L=1 O=0 etc.
> i feel a 'sploit lurking...
wawawa, I just try to find out if they missed something in 
their concept. If there is a simple chance only to have a 
"similar" looking address, you can get a lot of really private
mails. 

<historic big fault>
Remember some years ago as all Yahoo employees changed
their addresses from @yahoo.com to @yahooinc.com and after
that public people are so confused that they send after a
request from administration@yahoo.com their passwords to this
address.
</historic big fault>

And because it's not possible to use PGP FROM a phone 
and you can not (simply) access mobile phone mails from a 
normal computer, so also an PGP encrypted mail TO the phone 
is not easy to read. 

Email newbies easily send out private messages to other addresses
because they don't care about/don't know about that possible
somebody else can read/receive their message.

It's also much too simple to send out millions of SPAM mails
if you know that they all have the same domain address.

Imagine somebody on a hacked computer runs a simple script
which only counts from 00000000 to 99999999 and mails to
the addresses:
<loop>
mail -> 090$number@docomo.ne.jp;
$number++;
</loop>

This guy (hackers are 99,9% males) has a good chance to 
reach 50% of all I-Mode users, because not everybody knows 
about the option of changing your address and also 
(like Hotmail or AOL) a lot of prominent addresses are 
already taken, so people are stiffed with their phone number
as an simple to remember and fast to type email address.

Email standards are really, really old and based on trust.
And this time you can not trust anybody anymore, right? ;)

J.
Received on Mon Aug 28 13:54:41 2000