4 ms·
What if I send an email with a partial dictionary, hidden in an invisible HTML block. If the user is blocked from replying, I know their password was in my orig
by ggggtez 9y ago
What if I send an email with a partial dictionary, hidden in an invisible HTML block. If the user is blocked from replying, I know their password was in my original email.
- mod 9y agoHow do you know they're blocked from replying?
- kbenson 9y agoWhile I can envision a case where you might be able to make this work for specific configurations of the blocking and specific bounce handling and from address forging, while it would allow you to use to the resources of the remote org to do most the checking, it would also require fairly intimate knowledge of quite a few configuration variables. So may, in fact, that you would probably already have an administrator password of some sort if you were able to carry it out. :)
- CJefferson 9y agoThe user will see the bounce, so before you know they couldn't reply, they should know something weird is going on.