[TAG] Interesting spam

[Benjamin A. Okopnik]

On Tue, Jun 28, 2005 at 11:50:35AM -0700, Mike Orr wrote:
> Here's an interesting spam.  It's HTML followed immediately by a
> (presumably) base64 blob.  (I added spaces and __ in the tags to get it
> past the filters.)  Note how the image is a "cid:" URL, whatever that is. 

It's a URL that, along with "mid:", allows you to reference body parts
of messages; see RFC1738, where they're reserved but not defined.
Micr0s0ft, of course, is using them full-blast (is anyone surprised?)
and praying that others will pick up their implementation. [Yawn] Have
we seen this before, or have we seen this before?


* Ben Okopnik * Editor-in-Chief, Linux Gazette * http://linuxgazette.net *