[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: How can I report SPAM *without* opening the e-mail?

Mike Easter MikeE at ster.invalid
Fri Dec 30 09:02:24 EST 2005


jg wrote:

> Have read that, re-read it, went to bed, and tried to read it this
> A.M. /Think/ I have your gist but the bulk of your message escapes
> me.  But then, I'm not a mime freak and refuse to config Outlook just
> to experiment with it to figure out what you mean (I have Outlook as
> part of Office 2000 package but only use Excel, Word, and Access).
> I'm glad I gave you the opportunity to vent on the subject, however.
> This must relate to some past thread/discussion to which I'm not
> privy. Happy New year...

I'll give another rendition.

When a 'normal' mailuser agent receives an smtp email, it is stored in a
standard format.  That storage form is what SC wants and what abuse
desks want and what is normally provided as 'evidence' whether it is
provided by SC or by a manual notifier inline in a notify mail's body,
or by a manual notifier as an attachment.

When OL receives an smtp mail it does *NOT* store the item in a standard
format.  Instead, it detaches the headers and discards the original body
after it 'digests' that body in a mission to fulfill its role as a MS
Office MAPI client.  Then, it stores that MAPI recreation of the
original.  If called upon to produce the source of the message body,
which OL and other mua/s can do from the storage form described in the
par above, OL can't provide the original stored, because it has been
destroyed as described in the second sentence of this par.  So, instead,
it manufactures a fake reproduction of the original.  Naturally this
fake reproduction doesn't match the condition described in the headers
any more.

When the OL submitter provides that fake reproduction pretense of the
original, SC has to perform a hack on it to analyze the body for
spamvertisers.  When it comes time to provide the evidence to the abuse
desk, there have been 3 derivations of the destroyed original - and it
is the 3rd generation which is provided - not the true evidence as
received, which is long gone.

HNY your ownself right back atcha'

-- 
Mike Easter
kibitzer, not SC admin



More information about the SpamCop-List mailing list