A Medireview Approach To Stopping E-Mail Attacks

dcsmith writes: "This article at the Need To Know web site reports that the free(as in beer) e-mail arm of Yahoo has been replacing certain words in messages received by yahoo.com e-mail accounts. In an apparent attempt to forestall cross-site scripting attacks, 'mocha' becomes 'espresso' and 'free expression' becomes 'free statement'... My personal favorite - since medieval contains the text "eval", it is altered to 'medireview' ... Check Google for the number of web sites containing medireview." Kwelstr points to this story at New Scientist as well.

Comments

The law of precedent and (un)intened consequences

[MenTaLguY]

So, crimescript is double-plus ungood?

Peevish comment (must mod down!)

[fm6]

OK, I submitted this almost two years ago. I think I saw it in CNET. I've also flamed Yahoo on this point in several posts.

I'm not gonna complain about not getting the credit (I've had my share of stories). But jeeze, why is it news all of a sudden?

Maybe because the article's on New Scientist? I've seen so many stories from them, I no longer submit any from that site, on the assumption that somebody else already has. But I begin to wonder if the Slashdot editors even bother to read submissions unless they're on sites they like? OK, New Scientist, New York Times, various others that keep appearing on Slashdot -- they're very good sites. But they don't deserve any preference.