Resolved Sent email without composer & without Sender!

Discussion in 'iOS Programming' started by xArtx, Dec 31, 2012.

  1. xArtx, Dec 31, 2012
    Last edited: Jan 2, 2013

    macrumors 6502a

    Joined:
    Mar 30, 2012
    #1
    Hi Guys,
    Don't know exactly how I did it, but I was fiddling with email in an iOS program,
    (iOS6 SDK, iPhone 5), and during that time, this was sent.
    I didn't see any composer, or press any send button.
    Although I do have email working in another program,
    I thought I had not gotten email working at all in this one.

    [​IMG]

    So not only can it send emails without the user pressing the send button (or even noticing),
    it also send a message with no sender that I cannot reply to,
    or save to my address book.
    In the iPhone's and Mac's email client it actually says (no subject), (no sender).

    Wow!
     
  2. macrumors member

    Joined:
    Dec 6, 2010
    #2
    wow indeed... you should take the code you used and burn it :p definately dont want that falling into malicious hands
     
  3. thread starter macrumors 6502a

    Joined:
    Mar 30, 2012
    #3
    I haven't been able to do it again yet.
    The composer function must have been called.
    My email address is the only thing hard coded into it,
    and it knew where to send the email.

    Would make a great novelty program,
    and yes both of the features you want in some spambot!
    Send without user interaction, and senderless emails.
     
  4. Moderator

    dejo

    Staff Member

    Joined:
    Sep 2, 2004
    Location:
    The Centennial State
    #4
    How can you be so certain your program generated this email and not some coincidental, external spambot?
     
  5. thread starter macrumors 6502a

    Joined:
    Mar 30, 2012
    #5
    I can't be certain, but I'd bet money on it.

    The time the message arrived falls within the half hour period I was playing with it,
    and who would send a message with no subject, sender, or message body?
    That's not an efficient spambot.
    You need to populate at least one of the fields.

    But as I said, I haven't been able to do it again, and I gave it some time last night.
     
  6. macrumors 68030

    PhoneyDeveloper

    Joined:
    Sep 2, 2008
    #6
    Why don't you show the full headers from the email?
     
  7. xArtx, Dec 31, 2012
    Last edited: Dec 31, 2012

    thread starter macrumors 6502a

    Joined:
    Mar 30, 2012
    #7
    What do you want to see?
    I don't know what that means.

    ----------

    This?

    [​IMG]

    ----------

    The new email at the bottom is the working program that is supposed to send me email.
    It's from some further attempt to reproduce this last night.

    The time it was sent closely matches the time I trashed the project on the night, which is recorded in the filename in the trash.
     
  8. Moderator

    dejo

    Staff Member

    Joined:
    Sep 2, 2004
    Location:
    The Centennial State
    #8
    No, those are just the basic/default headers. What email client are you using? In Mac Mail, you would View > Message > All Headers to see them. And then it would look something like this:
     

    Attached Files:

  9. thread starter macrumors 6502a

    Joined:
    Mar 30, 2012
    #9
    I deleted it in everything other than Outlook Express (which was foolish).

    I will try to find what you mean.
     
  10. thread starter macrumors 6502a

    Joined:
    Mar 30, 2012
    #10
    It is still in the trash in the Mac email client:
    Date: 31 December 2012 12:03:51 AM AEDT
    Return-Path: <nfejrk@ns5.cnmsn.net>
    Received: from nskntcmgw01p ([61.9.169.161]) by nskntmtas02p.mx.MYISP.com with ESMTP id <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p> for <MYEMAILADDRESS@MYISP.net.au>; Sun, 30 Dec 2012 13:03:57 +0000
    Received: from ljyb.net ([184.82.79.10]) by nskntcmgw01p with MYISP Inbound id hp3v1k00k0DLnQg01p3vbS; Sun, 30 Dec 2012 13:03:57 +0000
    Received: from dummy.name; Sun, 30 Dec 2012 16:03:49 +0300
    Received: from dummy.name; Sun, 30 Dec 2012 14:59:47 +0200
    X-Authority-Analysis: v=2.0 cv=BZRaI8R2 c=1 sm=1 p=mdaDdF3DwzkA:10 a=QCk3LmMyBZuDHjNVafGI/g==:17 a=L9H7d07YOLsA:10 a=bxyv5XQRBkIA:10 a=QCk3LmMyBZuDHjNVafGI/g==:117
    Message-Id: <20121230130357.OJVW24575.nskntmtas02p.mx.MYISP.com@nskntcmgw01p>


    So looks like a false alarm then? The timing was perfect,
    and the message itself is useless to anyone then.

    Sorry.. Didn't mean to deceive anyone, I actually believed it.
     
  11. Moderator

    dejo

    Staff Member

    Joined:
    Sep 2, 2004
    Location:
    The Centennial State
    #11
    Yeah, guess it does.
     

Share This Page