Live data from Hacker News

Protecting your email address via SVG instead of JavaScript

rouninmedia.github.io

41–50 of 180 posts

Re: Protecting your email address via SVG instead of JavaScript

#42
post #26
post #9

> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here. https://imgur.com/2tCAgAf

[flagged]

If anything's the "new IE", it's Chrome! Dominant market position, >50% of people using it, (arguable?) abuse of a platform monopoly (search this time) to drive popularity. It also supports stuff other browsers don't, so we get sites that only work in Chrome - like we used to get sites that only worked in IE. Yes these are "web standards" now but the effect is similar.

(When did you see a site that only worked in Firefox, or only in Safari?)

Re: Protecting your email address via SVG instead of JavaScript

#43
post #41

I’ve been using the same gmail address for like 20 years. I don’t think I got a single spam email in the last 5-10 years. SMS, on the other hand…

A couple of modern spammers send you spam from Gmail and say “I included my colleague in CC please hit ‘reply all’ if you are interested”

Re: Protecting your email address via SVG instead of JavaScript

#44
post #36
post #27

Earlier quoted context omitted.

If you self-host your email, you can use "." as a delimiter instead of the "+". People would already need to know they can strip that part...

Sounds good! I might go even further and just use a custom address for each service, i.e. paypal@example.com or something. But self-hosting email is an adventure I'm nervous to embark on.

>Sounds good! I might go even further and just use a custom address for each service, i.e. paypal@example.com or something.

Which is exactly what I do. As soon as I see spam sent to any particular email address, I know who it is that leaked the address and I can block it without issue.

>But self-hosting email is an adventure I'm nervous to embark on.

Why are you nervous about it? I've been doing so for decades and haven't had many issues at all. There are a bunch of all-in-one solutions like mailinabox[0] (I roll my own, but as I said, I've been doing this for decades) and others which would likely make things simpler for you. Go for it! You won't be disappointed.

[0] https://en.wikipedia.org/wiki/Mail-in-a-Box

Re: Protecting your email address via SVG instead of JavaScript

#45
While the specific claim made about copying is true, you can right click and select copy email address, simply selecting the text and doing copy does not work. Similarly if you do select all into copy etc, so all in all, I wouldn't expect a regular user to be able to successfully copy this.

Re: Protecting your email address via SVG instead of JavaScript

#46
post #21

Earlier quoted context omitted.

The idea being that spam bots don't parse svg's looking for email addresses, just the page html. I'm not sure how effective this really is with modern spam protection, however.

The idea also seem to be that spam bots don’t look for `href="mailto:something"` in the DOM

That seems surprising, tbh

Re: Protecting your email address via SVG instead of JavaScript

#47

Don't have time to test myself right now - what about accessibility, can a screen reader read it?

I tested and seems accessible on the live demo. Not sure if is as protected as the author claims though, but it might throw some bots for a spin.

Man, I’ve always wondered how to test apps with a (simulated) screen reader, but never got too far

Re: Protecting your email address via SVG instead of JavaScript

#48
post #25
post #23

Earlier quoted context omitted.

This is appropriate advice for the average HN reader. For everyone else, probably not. I've seen first hand otherwise intelligent people being unable to discern an obvious (to me) online scam from a legitimate business. These are the people spammers are targeting. These are the people that need to obfuscate their email address.

So you're saying the same people unable to discern a spam email knows how to embed a mailto: link in an XML document and write webpages. Ok.

Never said that. I'm a web developer. People ask me to add their emails to web pages. Comment quality on here seems to have taken a dive.

Re: Protecting your email address via SVG instead of JavaScript

#49

Earlier quoted context omitted.

I tested and seems accessible on the live demo. Not sure if is as protected as the author claims though, but it might throw some bots for a spin.

Man, I’ve always wondered how to test apps with a (simulated) screen reader, but never got too far

I use this: https://chromewebstore.google.com/detail/aria-devtools/dneem...

Not sure about desktop apps.

Re: Protecting your email address via SVG instead of JavaScript

#50
post #26
post #9

> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here. https://imgur.com/2tCAgAf

[flagged]

Nonsensical comment. Sounds like you just wanted to take a shot at Firefox.
Post reply on HN