[SC-Help] Re: Opening spam insecure?

[Brian (SnSR)]

Anon_ wrote:
> "DougW" <lart-o-matic at revbeergoggles.com> wrote in message
> news:cvu67p$df9$1 at news.spamcop.net...
> 
>>Mike Easter did pass the time by typing:
>>
>>>Erin wrote:
>>>
>>>>Don't I have to open spam to report it? I've been told to not open
>>>>spam, but SpamPal doesn't work with web interfaces. Is it secure to
>>>>open junkmail with web interfaces in order to copy/paste and/or
>>>>forward?
>>
>>
>>Generally, no.  You have no idea what payload the message may have.
>>Some use specific URLs to validate live email accounts or pull
>>other shenanigans.
>>
>>
>>>Is it absolutely necessary that hotmail must be opened to be reported?
>>>
>>>Be careful about interpreting my remarks about not opening spam.  Many
>>>solid antispammers don't exactly see eye-to-eye with me about that, and
>>>my position sounds somewhat extreme and other strategies than mine which
>>>do involve opening spam may be employed, if done 'properly'.
>>
>>Sadly, hotmail doesn't have a safe view method.
> 
> 
> ****
> Yes it does have a method - tricky but it works.) Do the following:
> 
> Highlight the mail in the list
> Right click and click on copy shortcut
> Paste the shortcut into the address box at the top of the window (after
> clearing out the box)
> Add "&raw=data" (without quotes) to the shortcut
> Click on go
> Next screen is the same a view source in outlook express
> You can copy/paste this screen into a word processor (WordPad) and save it
> as a TXT file (click on back to get back to the mail page.)
> Forward THIS txt file as an attachment to spamcop's parser (paste the above
> into spamcop's web page
> You will get back the usual e-mail with the links for parsing and reporting
> 

It's late, I'm very tired, so maybe this is what's causing me to not get 
the same thing as you. I'm also using Firefox. What do you mean 
highlight the mail? Are you using the webmail in IE? In Firefox, you 
can't highlight it, just check or right click, where I can choose copy 
link location which is a javascript. Adding &raw=data does nothing.

Using IE and hotmail webmail interface, there is a view source link, 
but, IIRC, you have to have opened the email first. The link doesn't 
work in Firefox.

In OE, you can view source, but you have to download the email first, 
which, at least with the way my OE is configured, I have to open the 
email first. There may be other options, but I'm too tired to look right 
now.