Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
Hi Guys,
Don't know exactly how I did it, but I was fiddling with email in an iOS program,
(iOS6 SDK, iPhone 5), and during that time, this was sent.
I didn't see any composer, or press any send button.
Although I do have email working in another program,
I thought I had not gotten email working at all in this one.

email_zps0b84b866.jpg


So not only can it send emails without the user pressing the send button (or even noticing),
it also send a message with no sender that I cannot reply to,
or save to my address book.
In the iPhone's and Mac's email client it actually says (no subject), (no sender).

Wow!
 
Last edited:

truehybridx

macrumors member
Dec 6, 2010
86
0
wow indeed... you should take the code you used and burn it :p definately dont want that falling into malicious hands
 

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
I haven't been able to do it again yet.
The composer function must have been called.
My email address is the only thing hard coded into it,
and it knew where to send the email.

Would make a great novelty program,
and yes both of the features you want in some spambot!
Send without user interaction, and senderless emails.
 

dejo

Moderator emeritus
Sep 2, 2004
15,982
452
The Centennial State
I haven't been able to do it again yet.
The composer function must have been called.
My email address is the only thing hard coded into it,
and it knew where to send the email.

How can you be so certain your program generated this email and not some coincidental, external spambot?
 

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
How can you be so certain your program generated this email and not some coincidental, external spambot?

I can't be certain, but I'd bet money on it.

The time the message arrived falls within the half hour period I was playing with it,
and who would send a message with no subject, sender, or message body?
That's not an efficient spambot.
You need to populate at least one of the fields.

But as I said, I haven't been able to do it again, and I gave it some time last night.
 

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
Why don't you show the full headers from the email?

What do you want to see?
I don't know what that means.

----------

This?

Images_zpsaf64feb8.jpg


----------

The new email at the bottom is the working program that is supposed to send me email.
It's from some further attempt to reproduce this last night.

How can you be so certain your program generated this email and not some coincidental, external spambot?
The time it was sent closely matches the time I trashed the project on the night, which is recorded in the filename in the trash.
 
Last edited:

dejo

Moderator emeritus
Sep 2, 2004
15,982
452
The Centennial State
What do you want to see?
I don't know what that means.

----------

This?

Image

No, those are just the basic/default headers. What email client are you using? In Mac Mail, you would View > Message > All Headers to see them. And then it would look something like this:
 

Attachments

  • Screen Shot 2012-12-31 at 4.15.07 PM.png
    Screen Shot 2012-12-31 at 4.15.07 PM.png
    118.7 KB · Views: 174

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
No, those are just the basic/default headers. What email client are you using? In Mac Mail, you would View > Message > All Headers to see them. And then it would look something like this:

I deleted it in everything other than Outlook Express (which was foolish).

I will try to find what you mean.
 

xArtx

macrumors 6502a
Original poster
Mar 30, 2012
764
1
It is still in the trash in the Mac email client:
Date: 31 December 2012 12:03:51 AM AEDT
Return-Path: <nfejrk@ns5.cnmsn.net>
Received: from nskntcmgw01p ([61.9.169.161]) by nskntmtas02p.mx.MYISP.com with ESMTP id <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p> for <MYEMAILADDRESS@MYISP.net.au>; Sun, 30 Dec 2012 13:03:57 +0000
Received: from ljyb.net ([184.82.79.10]) by nskntcmgw01p with MYISP Inbound id hp3v1k00k0DLnQg01p3vbS; Sun, 30 Dec 2012 13:03:57 +0000
Received: from dummy.name; Sun, 30 Dec 2012 16:03:49 +0300
Received: from dummy.name; Sun, 30 Dec 2012 14:59:47 +0200
X-Authority-Analysis: v=2.0 cv=BZRaI8R2 c=1 sm=1 p=mdaDdF3DwzkA:10 a=QCk3LmMyBZuDHjNVafGI/g==:17 a=L9H7d07YOLsA:10 a=bxyv5XQRBkIA:10 a=QCk3LmMyBZuDHjNVafGI/g==:117
Message-Id: <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p>


So looks like a false alarm then? The timing was perfect,
and the message itself is useless to anyone then.

Sorry.. Didn't mean to deceive anyone, I actually believed it.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.