Obscuring Recipients

[Ross]

Currently SpamCop only replaces the first line of Cc recipents with "x".

I've noticed a lot of spam lately that lists my address as the last user

in about three lines of carbon copies.

(SpamCop handles wrapped header lines in other cases so long as the

next line starts with a tab, but seems to fail here.)

Example:

Received: from blah blah

Date: Fri, 18 Feb 2005 18:22:54 -0500

From: "Fake Address" <fake[at]example.com>

To: someotheruser[at]my.domain

CC: user1[at]my.domain, user2[at]my.domain, user3[at]my.domain,

user4[at]my.domain, user5[at]my.domain, user6[at]my.domain,

user7[at]my.domain, user8[at]my.domain, ME[at]my.domain

Subject: blah blah

(pretend there are tabs at the start of the user4 and user7 lines,

the forum software seems to delete any whitespace there)

...

SpamCop turns the To and Cc into this:

To: x

CC: x, x, x,

user4[at]my.domain, user5[at]my.domain, user6[at]my.domain,

user7[at]my.domain, user8[at]my.domain, ME[at]my.domain

Which is nice for those people in the first line of Ccs but not so nice

for me

Is this just an oversight or is it a feature of some type?

[swingspacers]

(pretend there are tabs at the start of the user4 and user7 lines, the forum software seems to delete any whitespace there)

24518[/snapback]

You can do this by putting code and /code tags (in square brackets) around what you post. This will make the board respect the whitespace. Like this:

Received: from blah blah
Date: Fri, 18 Feb 2005 18:22:54 -0500
From: "Fake Address" <fake[at]example.com>
To: someotheruser[at]my.domain
CC: user1[at]my.domain, user2[at]my.domain, user3[at]my.domain,
        user4[at]my.domain, user5[at]my.domain, user6[at]my.domain,
        user7[at]my.domain, user8[at]my.domain, ME[at]my.domain
Subject: blah blah

Here is a tracker that demonstrates the problem. It affects not just CC:, but also TO:

http://www.spamcop.net/sc?id=z733987496zac...ab6ba69477c1a9z

[StevenUnderwood]

This is something that should be fixed. It is probably because of how the search is done in the replace function.

Looking at the sample, I can see the search looking for the string <To:> and <Cc:> and replace all strings inside terminators <> with x on that line.

To fix it, you would have to continue the same replace function on the next lines as long as it starts with whitespace. I don't know the code so have no idea how easy that change would be.

I have brought this to the attention of the deputies.