[Ham-Computers] Recent changes to QTH list messages?

[Duane Fischer, W8DBF]

Aaron,

Alan Waller, K3TKJ retired and sold 'qth.net/qsl.net' December 31, 2008.

The new owner is KA9FOX, Scott.

There are a lot of things changing Aaron! Including spam on some lists, 
sadly. Al had one incident of a spam getting posted in 12 years!


----- Original Message ----- 
From: "Hsu, Aaron (NBC Universal)" <aaron.hsu at nbcuni.com>
To: "I>Ham-Computers" <Ham-Computers at mailman.qth.net>
Sent: Wednesday, February 18, 2009 9:24 PM
Subject: Recent changes to QTH list messages?


> OK, a few weeks (maybe months) ago, I noticed that some of the lists on
> QTH.NET were allowing HTML-based message to "flow through".  Now it
> looks like HTML with in-line graphics (or graphics links) are also
> "flowing through".
>
> In the past, all messages sent to QTH.NET lists were put through an HTML
> filter to remove HTML code before being "reflected".  IIRC, it was done
> for a few reasons:
>
> 1) HTML messages are space hogs.  HTML e-mails typically encapsulate two
> copies of the text in the message container - one in plain text and
> another with the HTML code.  Yes, it makes e-mails look "pretty", but
> the average size of the e-mail jumps quite a bit with the HTML code (at
> least 2x due to the duplication of the text).  For example, a recent
> message with some "smilies" that came through on the reflector was 14K
> in size.  When converted to plain-text, it was only 4K in size.  10K may
> not seem like much, but multiply that by the number of messages the
> entire QTH.NET system handles and you can see that it can become a
> problem.  Yes, HTML e-mails are "prettier", but I don't think they're
> necessary, esp on most of these lists.
>
> 2) JPG's are a method of malware distribution.  On unpatched systems,
> specially crafted JPG's can cause exploit a flaw in Windows' built-in
> JPG decoder such that malware is installed on the system.  This is how
> many "drive by" system infections occur - just visit a webpage or open
> an e-mail with a compromised JPG and your system is infected.  IIRC,
> this, and space concerns, were a prime reason for stripping graphics
> from e-mails.
>
> 3) Links in HTML e-mails can be spoofed - the message may say
> http://www.google.com, but clicking on it takes you to a rogue website
> (the actual link properties). Also, links can be used as "beacons" and
> used to retrieve and display in-line JPG's (possibly compromised).
>
>
> The "flow through" of HTML started before the shift to the new home
> hosted by KA9FOX.  I wonder if anyone else has noticed and if the
> various list managers know that it's occured.  Perhaps it was due to an
> upgrade of the list software.  Whatever it is, I feel that the lists
> should stay "plain-text" only - but that's just my opinion.
>
> One more thought...on the QTH Mailman lists homepage
> (http://mailman.qth.net), the last two guidelines state that messages
> are to be in plain-text and no attachments are allowed.  So have the
> rules changed or did something get "turned on" inadvertently?
>
>
> 73,
>
>  - Aaron, NN6O
>
>
>
>
> -- 
> Internal Virus Database is out-of-date.
> Checked by AVG.
> Version: 7.5.552 / Virus Database: 270.10.20/1944 - Release Date: 
> 2/10/2009 5:44 PM
>
>