Home page logo
/

bugtraq logo Bugtraq mailing list archives

RE: Intel.com Mailing List Arbitrary Address Removal Link
From: Knud Erik Højgaard <knud () cybercity dk>
Date: Fri, 8 Feb 2002 10:16:57 +0100

[original posting snipped up with crooked scissors]

cnn.com has similar stuff with their mailing lists. The best 
part about their lists is that they require no 'approval' of 
joining the list - they just start sending you mails. Always great coming back from a holiday just to see your mailbox 
flooded with a few hundred mails. 

useless side note: cnn is completely unresponsive to requests like 'what ip submitted the ´join´ request' 'please block 
my address from your list' etc. - perhaps one should just ignore mails from cnn.com - but perhaps the president will 
contact me one day when he's at cnn :)

-Knud
 
-----Original Message-----
From: E M [mailto:rdnktrk () hotmail com]
Sent: 6. februar 2002 01:16
To: bugtraq () securityfocus com

While Intel requires you to login to modify account 
information, it does not 
require you to login to remove your e-mail (or any e-mail) 
from its mailing 
list database.

.: Example :.

To Remove someone () domain com
http://intel.m0.net/m/u/ien/i.asp?e=someone%40domain.com


Removal of users from Mailing List without authorization.
  - Low


An oversight which should be resolved by requiring login prior to 
unsubscription from the list.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]