full-disclosure - a question about e-mails

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200402261459.09956.fulldisc@ultratux.org>
From: fulldisc at ultratux.org (maarten)
Subject: a question about e-mails

On Thursday 26 February 2004 10:02, Sandeep Sengupta wrote:
> Hi,
>
> Do a "REPLY ALL" (MS Outlook/express)
> All the email ids in TO, CC, BCC will be displayed. I hope this helps. Good
> luck :-)

Well, that would defeat the whole purpose of the BCC: field, now wouldn't it ?
In other words, no that will NOT list the original BCC: field recipients.

I think it is safe to assume that the people who drafted the RFC did their 
homework and it logically follows that there is (absolutely) no way to 
retrieve the original BCC entries (not even by the receiving smtp admin).

If that were not the case, that would mean using BCC has a hole in it big 
enough to drive a truck through...  and we would have heard about it.

Maarten

> Warm regards,
> Sandeep.
>
> -----Original Message-----
> From:	ASLI Unur [mailto:aunur@...ntmail.com]
> Sent:	Thu 26/02/2004 21:15
> To:	security_basics@...urityfocus.com; full-disclosure@...ts.netsys.com
> Cc:
> Subject:	[MAYBE SPAM] [Full-Disclosure] a question about e-mails
> Hi
> I have a question for it experts. I want to learn if there is any way of
> understanding/finding the e-mail addresses at BCC part on an e-mail that is
> send to you.
>
> Thanks for your consideration.

-- 
Yes of course I'm sure it's the red cable. I guarante[^%!/+)F#0c|'NO CARRIER