>> > Have you looked into a mailer that doesn't allow character-mode
>> > telnet?
I'm not a coder but couldn't you put in a timer function to test keystroke
times? If too many msecondes between key strokes and too many typos or ANY
backspaces drop the link.
Of course someone could then set up a pipe or program, but you've eliminated
the novice players and the ones who know mail can modify their mailer anyway
to provide fake info. You've also hampered your ability to test the mail
interface yourself but everything has a price.
By the way, how do you know it's telneting in and not the sender modifying
their own systems parameters to provide the fake info?
Adam Safier
CSC-SED-Infosec
asafier @
csc .
com
Are Grail and Python a copycat of Java and JavaScript? Is it even
competition? Who needs nightmares, just read the news.
Expressed opinions are my own and might not be shared by my employer or
anyone else.
|
|
