Live data from Hacker News

Protecting your email address via SVG instead of JavaScript

rouninmedia.github.io

111–120 of 180 posts

Re: Protecting your email address via SVG instead of JavaScript

#112
post #65

Here is what I do: rea nospam l@mai sjs l.com I still receive "spam" tho, but it seems they manually collected the email because what I receive are B2B proposals clearly targeted at the topic of my website.

If the scraper uses a headless browser, I think that it might defeat your method. That said, using a headless browser to crawl for emails is relatively expensive so perhaps the spam is not from your site.

Re: Protecting your email address via SVG instead of JavaScript

#113
post #62

> Email addresses published on webpages usually need to be protected from email-harvesting spambots. Do they though? I have had my email address published on my website in a I use both Gmail and (for some other addresses) a webmail hosted by a local company which uses some other filter. Both work well, so it's not something only Google can do.

I host my own Mailserver and all addresses that are publicly visible get spam, e.g. my blog or my mail that was visible on github.

Re: Protecting your email address via SVG instead of JavaScript

#114
I think the main thing people forget with stuff like this is that yes, all these setups are possible (or even trivial) to bypass, but you're not really dealing with a dedicated adversary that's targeting you in particular.

Spammers probably aren't going to update their tools to take into account every possible way every site obfuscates their email addresses, so the main trick to dealing with them would be to do something other sites/services don't. If you or your company become successful enough that people are actually targeting you in particular, then congrats, you're probably in a good place anyway.

Re: Protecting your email address via SVG instead of JavaScript

#115

My domain: 24 years registered to me. A .com. My email address: Listed at the top of the front page. In a H3 tag. This email address's spam problem: Not a problem. 15ish per day get to me including Junk folder. Thanks Purelymail. What is a problem: Transactional email unrelated to transactions, Promotional email which is newsletter junk spam, Social networks complaining of not being used.

15 spam mails do seem quite much to me. I blacklisted addresses for less.

Re: Protecting your email address via SVG instead of JavaScript

#116
post #62

> Email addresses published on webpages usually need to be protected from email-harvesting spambots. Do they though? I have had my email address published on my website in a I use both Gmail and (for some other addresses) a webmail hosted by a local company which uses some other filter. Both work well, so it's not something only Google can do.

Same here, I've had my email plainly visible on my website in mailto links and on Github, and I don't get any spam that breaks through Fastmail's spam filters.

Re: Protecting your email address via SVG instead of JavaScript

#117
post #108

A friend of mine is an absolute wizard and has been building essentially “responsive images” as SVGs with JS inside. They adapt to their size programmatically. It’s… interesting. The fact that SVGs can even have JS embedded feels both untapped and kind of dangerous.

SVGs are responsive out of the box? I'm confused about what the Javascript would be doing to help that situation within the svg.

Re: Protecting your email address via SVG instead of JavaScript

#118
post #62

> Email addresses published on webpages usually need to be protected from email-harvesting spambots. Do they though? I have had my email address published on my website in a I use both Gmail and (for some other addresses) a webmail hosted by a local company which uses some other filter. Both work well, so it's not something only Google can do.

My preference is to not have my email harvested at all when possible, even if I don't personally see the spam emails. (I'm not saying it's a critical privacy/security issue, but a preference.)

Re: Protecting your email address via SVG instead of JavaScript

#119
post #92

Not only "protecting your email" is pointless like others have already pointed out, it's actively harmful. There are a fair few sites, where most all content is perfectly readable without JS, except things like "1920x1080@60Hz" are displayed as literal "[email protected]" text.

> There are a fair few sites, where most all content is perfectly readable without JS, except things like "1920x1080@60Hz" are displayed as literal "[email protected]" text.

Do you have one on hand? That sounds absurd and I've never seen it

Re: Protecting your email address via SVG instead of JavaScript

#120
post #117
post #108

A friend of mine is an absolute wizard and has been building essentially “responsive images” as SVGs with JS inside. They adapt to their size programmatically. It’s… interesting. The fact that SVGs can even have JS embedded feels both untapped and kind of dangerous.

SVGs are responsive out of the box? I'm confused about what the Javascript would be doing to help that situation within the svg.

I think they’re talking about dynamically actually changing the image itself, not just resizing
Post reply on HN