untangling_the_web

DID: 4046925
UNCLASSIFIEDJJr;OR or;r;ICIAb Uii O~lb¥
• Under the Hidden files and folders heading select Show hidden files and
folders.
• Uncheck the Hide protected operating system files (recommended)
option.
• Click Yes to confirm.
• Click OK.
HTML & Email: Two Things That Do Not Belong Together
One of the worst practices to gain widespread acceptance on the Internet is HTML
email. Surprised? It sounds like a nice idea (I mean, don't HTML messages look a
lot nicer than text?), but in reality it is the source of lots of problems. HTML was
created for web browsers and webpages, and that's where it belongs. But
somewhere along the way, someone got the "bright" idea that HTML would make
pretty email messages, complete with graphics and scripts and all those things that
go into webpages. Unfortunately, all the qualities that make HTML appealing and
flexible also make it vulnerable and have created huge problems with email. Here
are some (not all) of the major problems with HTML in email:
1. HTML often contains executable code, such as JavaScript, Java, or ActiveX,
which can automatically do a number of things on your computer without your
doing anything to activate it and without your knowledge or consent.
2. Email programs (such as Outlook and Netscape Messenger) often have bugs
that have been exploited by email worms and viruses that include automatic
execution of attachments, buffer overflows, etc. While the bugs have been
systematically patched by their manufacturers, the fact is that many people do
not install patches and new exploits come along all the time. HTML facilitates
the spread of malicious software.
3. Macromedia Flash is a browser plug-in that "interprets" code, so it could be
used to execute malicious code or initiate buffer overflows from a fancy HTML
email message.
4. Web bugs (invisible clear images imbedded in HTML email) are' used
routinely both by advertisers and spammers to track who reads (that means
OPENS) their email messages. When you VIEW the message, the web bug
(image) is downloaded and a unique ID is sent back to the
spammer/advertiser. Now he knows your email address is alive and well and
ready to receive more spam! Some email readers prohibit the display of
remote graphics in HTML email by default; these include but are not limited to
Google's Gmail, Yahoo Mail, Mozilla Thunderbird, and Opera. Outlook 2003
with Windows XP SP2 adds anti-phishing functionality, displaying all junk
email in plain text format and removing the ability to click on URLs in the junk
email folder and on other suspicious messages.
UNCLASSIFIEDNFOR OFFlGIJirL l:J5E ONLY 547