Resolved: Sent email without composer & without Sender!

[xArtx]

Hi Guys,
Don't know exactly how I did it, but I was fiddling with email in an iOS program,
(iOS6 SDK, iPhone 5), and during that time, this was sent.
I didn't see any composer, or press any send button.
Although I do have email working in another program,
I thought I had not gotten email working at all in this one.



So not only can it send emails without the user pressing the send button (or even noticing),
it also send a message with no sender that I cannot reply to,
or save to my address book.
In the iPhone's and Mac's email client it actually says (no subject), (no sender).

Wow!

[truehybridx]

wow indeed... you should take the code you used and burn it :P definately dont want that falling into malicious hands

[xArtx]

I haven't been able to do it again yet.
The composer function must have been called.
My email address is the only thing hard coded into it,
and it knew where to send the email.

Would make a great novelty program,
and yes both of the features you want in some spambot!
Send without user interaction, and senderless emails.

[dejo]

Originally Posted by xArtx

I haven't been able to do it again yet.
The composer function must have been called.
My email address is the only thing hard coded into it,
and it knew where to send the email.

How can you be so certain your program generated this email and not some coincidental, external spambot?

[xArtx]

Originally Posted by dejo

How can you be so certain your program generated this email and not some coincidental, external spambot?

I can't be certain, but I'd bet money on it.

The time the message arrived falls within the half hour period I was playing with it,
and who would send a message with no subject, sender, or message body?
That's not an efficient spambot.
You need to populate at least one of the fields.

But as I said, I haven't been able to do it again, and I gave it some time last night.

[PhoneyDeveloper]

Why don't you show the full headers from the email?

[xArtx]

Originally Posted by PhoneyDeveloper

Why don't you show the full headers from the email?

What do you want to see?
I don't know what that means.

----------

This?



----------

The new email at the bottom is the working program that is supposed to send me email.
It's from some further attempt to reproduce this last night.

How can you be so certain your program generated this email and not some coincidental, external spambot?

The time it was sent closely matches the time I trashed the project on the night, which is recorded in the filename in the trash.

[dejo]

Originally Posted by xArtx

What do you want to see?
I don't know what that means.

----------

This?

Image

No, those are just the basic/default headers. What email client are you using? In Mac Mail, you would View > Message > All Headers to see them. And then it would look something like this:

[xArtx]

Originally Posted by dejo

No, those are just the basic/default headers. What email client are you using? In Mac Mail, you would View > Message > All Headers to see them. And then it would look something like this:

I deleted it in everything other than Outlook Express (which was foolish).

I will try to find what you mean.

[xArtx]

It is still in the trash in the Mac email client:
Date: 31 December 2012 12:03:51 AM AEDT
Return-Path: <nfejrk@ns5.cnmsn.net>
Received: from nskntcmgw01p ([61.9.169.161]) by nskntmtas02p.mx.MYISP.com with ESMTP id <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p> for <MYEMAILADDRESS@MYISP.net.au>; Sun, 30 Dec 2012 13:03:57 +0000
Received: from ljyb.net ([184.82.79.10]) by nskntcmgw01p with MYISP Inbound id hp3v1k00k0DLnQg01p3vbS; Sun, 30 Dec 2012 13:03:57 +0000
Received: from dummy.name; Sun, 30 Dec 2012 16:03:49 +0300
Received: from dummy.name; Sun, 30 Dec 2012 14:59:47 +0200
X-Authority-Analysis: v=2.0 cv=BZRaI8R2 c=1 sm=1 p=mdaDdF3DwzkA:10 a=QCk3LmMyBZuDHjNVafGI/g==:17 a=L9H7d07YOLsA:10 a=bxyv5XQRBkIA:10 a=QCk3LmMyBZuDHjNVafGI/g==:117
Message-Id: <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p>


So looks like a false alarm then? The timing was perfect,
and the message itself is useless to anyone then.

Sorry.. Didn't mean to deceive anyone, I actually believed it.

[dejo]

Originally Posted by xArtx

So looks like a false alarm then?

Yeah, guess it does.