OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: jump2.eudora.com
From: Matt Zimmerman (mdzCSH.RIT.EDU)
Date: Sun Aug 27 2000 - 23:11:30 CDT

On Sun, Aug 27, 2000 at 04:32:58PM -0400, William Daskaluk wrote:

> So it sent a request to jump2.eudora.com which looks like the following...
>
> GET /jump.cgi?action=update&platform=Windows 98
> v.04.10.2222&product=Eudora&version=4.3.2
>
> All that other junk in the tcpdump was just your computer negotiating a
> connection.
>
> Where exactly is this 'information' that eudora is sending? It looks to me like
> it is simply checking to see if a newer version of Eudora is available.

- The OS and version running on the origin host
- The version of Eudora running on the origin host
- The fact that the origin host is probably used for reading mail
- A hint that the origin host is probably a single-user system (where security
  tends to be weaker)

Probably harmless in most situations, but there should be an option to disable
this check for the benefit of security-paranoid and privacy-conscious users. 

-- 
 - mdz
  • application/pgp-signature attachment: stored