Re: What is the best way to hide email addresses in a web site from SpamBots?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: shalafi (jack_at_bone.com)
Date: 06/22/04 

Date: Tue, 22 Jun 2004 17:16:05 -0400

the easiest, and the way i prefer since my site is so small... is to just
make a form to send an email to selected person. the real email address
doesnt get sent to the browser but contained on the server.

simplest solution IMHO...

"clintonG" <csgallagher@REMOVETHISTEXT@metromilwaukee.com> wrote in message
news:OHB5vqIWEHA.2544@TK2MSFTNGP10.phx.gbl...
> Using ISO-8859-1 encoding as the safemail.org sites generates is a
> sham. The site should be taken down as it is probably a phishing hole
> used to collect legitimate addresses from those who don't know
> any better.
>
> How do I know this? I've developed encoding schemes myself (years ago)
> using Cold Fusion and ASP. I discovered that none of the browsers
> I tested with can parse the mailto: protocol handler if it was encoded.
> Thus, even scripts used by amateurs can find the mailto: and grab
> any characters that follow and simply decode them. Its a piece of cake.
>
> Using JavaScript to build the address dynamically is also a sham that to
> my surprise is still being touted by developers that are supposed to know
> better. Let me make it clear:
>
> TEXT EMBEDDED IN THE BODY OF A WEB PAGE IS INSECURE
>
> The JavaScript method is easily foiled by anybody that has 'screen
scraping'
> and 'regular expressions' scripts. Cheap Linux hack box harvesting farms
> can be built from old machines for what? Under $100 a box if that?
>
> At the moment, the only way to display an e-mail address in a web page
> 'securely' is to use an imaging methodology that requires a human operator
> to read something and/or interact with a form.
>
> Still, that is not really 'secure' but is 'presumed' to be an effective
defense
> as actually harvesting the address would require a human operator to see
> and manually record the addresses one at a time. So, this method is
> only as secure as the hassle factor allows.
>
> --
> <%= Clinton Gallagher
> A/E/C Consulting, Web Design, e-Commerce Software Development
> Wauwatosa, Milwaukee County, Wisconsin USA
> NET csgallagher@ REMOVETHISTEXT metromilwaukee.com
> URL http://www.metromilwaukee.com/clintongallagher/
>
>
>
>
>
> "Raterus" <raterus@spam.org> wrote in message
> news:uzlf08GWEHA.2844@TK2MSFTNGP12.phx.gbl...
> Here is one option
> http://www.safeemail.org/
> though I believe as spambots get smarter, they'll eventually catch on.
>
> You could also look at javascript email cloakers, there are many out
there.
>
> Also you could always just use an image to display your email, but I'd
follow
> this articles advice.
> http://www.15seconds.com/issue/040202.htm
>
> "Miguel Dias Moura" <web001@27NOSPAMlamps.com> wrote in message
> news:%23JRngyGWEHA.4032@TK2MSFTNGP11.phx.gbl...
> > Hi,
> >
> > i have some email addresses in a web site of a client.
> > Can you tell me what are the best ways to somehow hide the email
addresses
> > from the SpamBots.
> >
> > Can you give the a list of:
> > 1. What To Do
> > 2. What Not To Do
> >
> > Thanks,
> > Miguel
> >
> >
>
>

Relevant Pages

  • Re: What is the best way to hide email addresses in a web site from SpamBots?
    ... > Using JavaScript to build the address dynamically is also a sham that to ... > 'securely' is to use an imaging methodology that requires a human operator ... > only as secure as the hassle factor allows. ... > though I believe as spambots get smarter, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Need help with Form, almost have answer
    ... only one way to register and pay online, ... Everything was secure. ... But only US residents could pay for the ... and the e-mail address I was using is of the form x@xxxxxxxxxxxx So I examined the Javascript and doctored it to get around this validation and submitted the form again. ...
    (comp.infosystems.www.authoring.html)
  • Re: Jim, simple U04 SPICE model?
    ... Using javascript forces your clients to enable it. ... The link you used to send me that U04 file has been up for over five years. ... Many sites will encode your address for free so spambots can't find it. ...
    (sci.electronics.design)
  • Re: Stopping someone From Steeling Your Scripts
    ... If you must use JavaScript "security" have a look at ... secure as you can get - with JavaScript. ... it seems that anyone can get those scripts and see the content ... server side help is out of the question. ...
    (microsoft.public.frontpage.client)
  • Re: Hiding email address from spam bots
    ... impressive results of personal trials using encoding etc and no ... Although it's true it doesn't work if javascript is off, ... web-page 99% of users will have javascript on. ... The web form I think is the most secure way to prevent the email address ...
    (alt.html)