Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > microsoft.public.scripting.vbscript > #11818 > unrolled thread

Decode-email

Back to article view | Back to microsoft.public.scripting.vbscript

Contents

  Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-15 20:09 -0500
    Re: Decode-email GS <gs@v.invalid> - 2018-02-15 22:52 -0500
      Re: Decode-email GS <gs@v.invalid> - 2018-02-15 23:02 -0500
      Re: Decode-email GS <gs@v.invalid> - 2018-02-15 23:34 -0500
      Re: Decode-email GS <gs@v.invalid> - 2018-02-16 00:44 -0500
        Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-16 09:46 -0500
          Re: Decode-email JJ <jj4public@vfemail.net> - 2018-02-17 22:00 +0700
    Re: Decode-email JJ <jj4public@vfemail.net> - 2018-02-17 01:46 +0700
      Re: Decode-email GS <gs@v.invalid> - 2018-02-16 15:30 -0500
        Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 09:29 -0500
        Re: Decode-email JJ <jj4public@vfemail.net> - 2018-02-17 21:47 +0700
          Re: Decode-email GS <gs@v.invalid> - 2018-02-17 19:51 -0500
            Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 20:33 -0500
              Re: Decode-email GS <gs@v.invalid> - 2018-02-17 21:40 -0500
                Re: Decode-email GS <gs@v.invalid> - 2018-02-17 21:43 -0500
                Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 22:57 -0500
                  Re: Decode-email GS <gs@v.invalid> - 2018-02-17 23:10 -0500
                    Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 23:18 -0500
                      Re: Decode-email GS <gs@v.invalid> - 2018-02-17 23:41 -0500
                        Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-18 10:23 -0500
                          Re: Decode-email GS <gs@v.invalid> - 2018-02-18 10:38 -0500
                            Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-18 11:09 -0500
                              Re: Decode-email GS <gs@v.invalid> - 2018-02-18 13:20 -0500
            Re: Decode-email JJ <jj4public@vfemail.net> - 2018-02-18 09:47 +0700
              Re: Decode-email GS <gs@v.invalid> - 2018-02-17 21:50 -0500
      Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-16 18:43 -0500
        Re: Decode-email GS <gs@v.invalid> - 2018-02-16 20:06 -0500
          Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-16 23:18 -0500
            Re: Decode-email GS <gs@v.invalid> - 2018-02-16 23:32 -0500
            Re: Decode-email GS <gs@v.invalid> - 2018-02-17 00:00 -0500
              Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 09:24 -0500
                Re: Decode-email "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-02-17 16:07 +0100
                  Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 10:46 -0500
                    Re: Decode-email "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2018-02-17 18:18 +0100
                Re: Decode-email GS <gs@v.invalid> - 2018-02-17 21:46 -0500
                  Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-17 23:09 -0500
                    Re: Decode-email GS <gs@v.invalid> - 2018-02-17 23:13 -0500
                    Re: Decode-email GS <gs@v.invalid> - 2018-02-17 23:23 -0500
                      Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-18 10:32 -0500
                        Re: Decode-email GS <gs@v.invalid> - 2018-02-18 10:41 -0500
                          Re: Decode-email "Mayayana" <mayayana@invalid.nospam> - 2018-02-18 16:30 -0500
                            Re: Decode-email GS <gs@v.invalid> - 2018-02-18 16:41 -0500

Page 1 of 3  [1] 2 3  Next page →

#11818 — Decode-email

  I don't know if anyone's interested in this, but
maybe. I don't like to enable script in the browser.
Yet thousands of websites use a specific javascript
to encode email addresses, usually making them
invisible unless one enables script. The decoder
is called decode-email.min.js. It's not just the typical
hex ASCII values. It uses an extra twist, converting
the ASCII values for letters to hex representations
of that number XOR-ed.

   I got tired of not being able to find someone's
email, so I wrote a little desktop decoder script.
I also wrote an encoder. The encoder below will
accept someone@somewhere.com53 and return:

35465A58505A5B5075465A5850425D5047501B565A58

That string will be converted back by the decoder.
The 53 is random. It just requires any byte-value
numeric key to do the encoding. The decoder doesn't
need to know it because the encoded string starts
with the key. (H35 = decimal 53)

'----------- begin decoder script ---------------------------

' Script to do the job of email-decode.min.js. This script is used
' on many sites to obfuscate email addresses. The email will be encoded
' as a very long string of characters. Each 2 characters represent a
' hex code, but the first two are a key. That key is then XOR-ed with
' each following pair to get the email characters.
'  Example:
'  s = "523b3c343d"  'decimal:  82 59 60 52 61

      '82 XOR 59 = 105 = i
      '82 XOR 60 = 110 = n
      '82 XOR 52 = 102 = f
      '82 XOR 61 = 111 = o
      ' s decoded = "info"

s = InputBox("Enter encrypted email address text to decode. This script 
works to replace email-decode.min.js, which is used on thousands of 
websites.", "Decode email address")
   If Len(s) = 0 Then WScript.quit
sRet = InputBox("Decrypted email:", "Decode email address", EmailDecode(s))
WScript.quit

Function EmailDecode(sIn)
 Dim iKey, iPos, s2, iVal
    iKey = CByte("&H" & Left(sIn, 2))  'get they XOR key.
    iPos = 3
    Do While iPos <= Len(sIn)
             ' get each character pair, treat as hex code and convert to 
decimal.
             ' XOR each with the key value, then treat that as an ASCII 
character code and
             ' convert to character.
          s2 = Mid(sIn, iPos, 2)
          iVal = cbyte("&H" & s2)
          EmailDecode = EmailDecode & Chr(iVal XOR iKey)
          iPos = iPos + 2
    Loop
End Function

'---------------------- begin encoder script ---------


Dim s, sEmail, sKey, s2, i, iKey, iVal

s = InputBox("Enter email address to encode. Follow that with a 2-digit key 
for encoding", "Email address encoder")
    If Len(s) = 0 Then WScript.quit

  On Error Resume Next
s = Replace(s, " ", "")
sEmail = Left(s, len(s) - 2)
sKey = Right(s, 2)
iKey = cbyte(sKey)
  If Err.number <> 0 Then
     MsgBox "Error in entering email and encryption key."
     WScript.Quit
   End If

s2 = Hex(iKey)
For i = 1 to Len(sEmail)
    iVal = Asc(Mid(sEmail, i, 1))
    iVal = iVal XOR iKey
    s2 = s2 & Hex(iVal)
 Next

s = InputBox("Encoded email address:", "Encode email address", s2)
WScript.quit
 

[toc] | [next] | [standalone]

#11819

Decode returns my email address with this appended...

  ÕÅ-

..which I assume represents to 2 digit key XOR'd by itself?

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11820

> Decode returns my email address with this appended...
>
>   ÕÅ-
>
> ..which I assume represents to 2 digit key XOR'd by itself?

Looking at this closer, it occurs to me that the key needs to be removed from 
the encoded string and so I got correct results after revising this line...

      Do While iPos <= Len(sIn) - 8

..but I suspect the encode script needs to be revised since a 2 digit key is 4 
chars not 8. What say you?

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11821

Just FYI:

My email has 19 chars. (21 including key)
The encoded string returned has 39 chars.

If I truncate the encoded string by 7 chars your decode script returns 
correctly.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11822

The following 2 digit combos don't work:

00 thru 15
33 thru 47
64 thru 79
96 thru 99

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11829

"GS" <gs@v.invalid> wrote

| The following 2 digit combos don't work:
|
| 00 thru 15
| 33 thru 47
| 64 thru 79
| 96 thru 99
|

  Interesting. I didn't look into whether there were limits
on the key. The first one I came across was 82. Then
I think I used 53 and 61. I guess it all worked for me
by accident.

   So, thanks. You've probably saved me a few
of my remaining hairs. Though I have no plan to ever
use the encoding myself. I just wanted a handy decoder
for when I come across websites using the method. I
came across two this week.

[toc] | [prev] | [next] | [standalone]

#11844

On Fri, 16 Feb 2018 09:46:33 -0500, Mayayana wrote:
> 
>   Interesting. I didn't look into whether there were limits
> on the key. The first one I came across was 82. Then
> I think I used 53 and 61. I guess it all worked for me
> by accident.
> 
>    So, thanks. You've probably saved me a few
> of my remaining hairs. Though I have no plan to ever
> use the encoding myself. I just wanted a handy decoder
> for when I come across websites using the method. I
> came across two this week.

The error is probably same as mine, where the generated hex string may
contains only 1 digit instead of always 2 digits.

[toc] | [prev] | [next] | [standalone]

#11832

On Thu, 15 Feb 2018 20:09:21 -0500, Mayayana wrote:
>   I don't know if anyone's interested in this, but
> maybe. I don't like to enable script in the browser.
> Yet thousands of websites use a specific javascript
> to encode email addresses, usually making them
> invisible unless one enables script. The decoder
> is called decode-email.min.js. It's not just the typical
> hex ASCII values. It uses an extra twist, converting
> the ASCII values for letters to hex representations
> of that number XOR-ed.

You might be interrested on CloudFlare's encrypted email.
You can find out about it by googling "data-cfemail" (with quotes).
Note: the encrypted email isn't visible on the page, since it's stored in
the "data-cfemail" attribute of an achor element (i.e. link).

function DecodeCfEmail(CfEmail)
  'decode CloudFlare encrypted email. e.g. from
  '"data-cfemail" attribute of an anchor element.
  'Data format: {key-byte}{encrypted-email-bytes}
  s = ""
  if CfEmail <> "" then
    key = eval("&H" & left(CfEmail, 2))
    for i = 1 to ((len(CfEmail) / 2) - 1)
      e = eval("&H" & mid(CfEmail, (i * 2) + 1, 2))
      s = s & chr(e xor key)
    next
  end if
  DecodeCfEmail = s
end function

function EncodeCfEmail(email, key)
  'encode a CloudFlare-style encrypted email.
  'key is a number between &H10 to &HFF.
  'if key is 0 or "", and random key will be used.
  if email <> "" then
    if (key = 0) or (key = "") then
      key = 0
      while key < &H10
        key = cint(rnd * 256)
      wend
    end if
    key = key and &Hff
    s = hex(key)
    for i = 1 to len(email)
      s = s & hex(asc(mid(email, i, 1)) xor key)
    next
  else
    s = ""
  end if
  EncodeCfEmail = s
end function

'usage example
a = "johndoe@nowhere.net"
wscript.echo "Email: " & a
b = EncodeCfEmail(a, 0)
wscript.echo "Encrypted: " & b
c = DecodeCfEmail(b)
wscript.echo "Decrypted: " & c

[toc] | [prev] | [next] | [standalone]

#11835

Thanks for your contribution!
As written, it only works when  0  is the key.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11842

"GS" <gs@v.invalid> wrote

| As written, it only works when  0  is the key.
|

  It looks like the author of that version made
the same mistake, not handling single-character
hex results in the encoding. 

[toc] | [prev] | [next] | [standalone]

#11843

On Fri, 16 Feb 2018 15:30:22 -0500, GS wrote:
> Thanks for your contribution!
> As written, it only works when  0  is the key.

The EncodeCfEmail function has a bug on converting an integer to a hex
string where the result may only have one hex digit. Sorry about that.
Here's the fix.

function ByteHex(n)
  if n > 15 then
    ByteHex = hex(n)
  else
    ByteHex = "0" & hex(n)
  end if
end function

function EncodeCfEmail(email, key)
  'encode a CloudFlare-style encrypted email.
  'key is a number between &H10 to &HFF.
  'if key is 0 or "", and random key will be used.
  if email <> "" then
    if (key = 0) or (key = "") then
      key = 0
      while key < &H10
        key = cint(rnd * 256)
      wend
    end if
    key = key and &Hff
    s = ByteHex(key)
    for i = 1 to len(email)
      s = s & ByteHex(asc(mid(email, i, 1)) xor key)
    next
  else
    s = ""
  end if
  EncodeCfEmail = s
end function

[toc] | [prev] | [next] | [standalone]

#11848

This new code throws a typemismatch error when decoding running with your 
original usage example!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11849

"GS" <gs@v.invalid> wrote

| This new code throws a typemismatch error when decoding running with your
| original usage example!
|

  Seems to work OK for me. Either way, I think
we have it settled: It works as long as all
encrypted characters end up as 2-byte hex.

  I'd never heard of CloudFlare before. They seem
to specialize in content delivery, security and
possibly spyware, claiming to host 7 million sites
as a reverse proxy, man-in-the-middle service.

   Oddly, the two sites I've seen are a chiropractor
and a small church. Hardly the kind of sites one
would expect to need CDN. Maybe their webhosts
are running CloudFlare to do the heavy lifting. My
chiropractor seems to be paying $100/month for
a very basic website through iMatrix and using
CloudFlare. I guess she got suckered.

[toc] | [prev] | [next] | [standalone]

#11850

> "GS" <gs@v.invalid> wrote
>
>> This new code throws a typemismatch error when decoding running with your
>> original usage example!
>> 
>
>   Seems to work OK for me. Either way, I think
> we have it settled: It works as long as all
> encrypted characters end up as 2-byte hex.

I just created a 2nd .vbs with the new code and added the usage example code 
from the original. How did you do it? Can you post your version so I can 
compare?
>
>   I'd never heard of CloudFlare before. They seem
> to specialize in content delivery, security and
> possibly spyware, claiming to host 7 million sites
> as a reverse proxy, man-in-the-middle service.
>
>    Oddly, the two sites I've seen are a chiropractor
> and a small church. Hardly the kind of sites one
> would expect to need CDN. Maybe their webhosts
> are running CloudFlare to do the heavy lifting. My
> chiropractor seems to be paying $100/month for
> a very basic website through iMatrix and using
> CloudFlare. I guess she got suckered.

I use PairNetworks for hosting and nic. Costs me about USD$70/yr!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11851

Duh.., forgot to copy/paste the decode function. sheesh!!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11855

"GS" <gs@v.invalid> wrote

| I use PairNetworks for hosting and nic. Costs me about USD$70/yr!
|

   Isn't that one of the originals from the old days?
I used Earthlink for many years and liked them. But then
I think they changed hands. They started subbing out
the email and I had problems with that. They screwed
up my server logs and didn't seem to care. So I
switched a few years ago. Futurequest.net. $9/month.
A little more than you're paying, but a bargain to my mind.
It's a small, personal-level operation and very responsive.

  It's hard to figure the business models. There are hosts
charging hundreds/month for what seems to be just
basic hosting. Other hosts charge more like $3. Yet
both get lots of customers! 

[toc] | [prev] | [next] | [standalone]

#11857

> "GS" <gs@v.invalid> wrote
>
>> I use PairNetworks for hosting and nic. Costs me about USD$70/yr!
>> 
>
>    Isn't that one of the originals from the old days?
> I used Earthlink for many years and liked them. But then
> I think they changed hands. They started subbing out
> the email and I had problems with that. They screwed
> up my server logs and didn't seem to care. So I
> switched a few years ago. Futurequest.net. $9/month.
> A little more than you're paying, but a bargain to my mind.
> It's a small, personal-level operation and very responsive.
>
>   It's hard to figure the business models. There are hosts
> charging hundreds/month for what seems to be just
> basic hosting. Other hosts charge more like $3. Yet
> both get lots of customers! 

Yep, my daughter pays a fortune every month for just hosting and NIC is done 
elsewhere.

PN includes everything, and they provide 200 mailboxes per domain. I use my own 
mail script written in Perl. Other than my contact form, there's no other 
scripting anywhere. (I basically only have it to service client file transfers. 
If I ever finish my email encryption feature I'll be dropping the website and 
use DropBox for file transfers.)

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11859

"GS" <gs@v.invalid> wrote

| Yep, my daughter pays a fortune every month for just hosting and NIC is 
done
| elsewhere.
|
   What is NIC? I looked it up but haven't found a definition.

| PN includes everything, and they provide 200 mailboxes per domain. I use 
my own
| mail script written in Perl. Other than my contact form, there's no other
| scripting anywhere. (I basically only have it to service client file 
transfers.
| If I ever finish my email encryption feature I'll be dropping the website 
and
| use DropBox for file transfers.)

  Email encryption? For the Perl script?
Have we talked about that? I explored
TLS encryption for SMTP awhile back
and got in long discussions with Arne
on m.p.v.b.d, but finally gave up. I
never found any resources that were
properly documented and couldn't get
any option to work. 

[toc] | [prev] | [next] | [standalone]

#11861

> "GS" <gs@v.invalid> wrote
>
>> Yep, my daughter pays a fortune every month for just hosting and NIC is  
>> done elsewhere.
>> 
>    What is NIC? I looked it up but haven't found a definition.
>
>> PN includes everything, and they provide 200 mailboxes per domain. I use  my 
>> own mail script written in Perl. Other than my contact form, there's no 
>> other scripting anywhere. (I basically only have it to service client file  
>> transfers. If I ever finish my email encryption feature I'll be dropping the 
>> website  and use DropBox for file transfers.)
>
>   Email encryption? For the Perl script?
> Have we talked about that? I explored
> TLS encryption for SMTP awhile back
> and got in long discussions with Arne
> on m.p.v.b.d, but finally gave up. I
> never found any resources that were
> properly documented and couldn't get
> any option to work. 

Well.., I'm implementing a twist to the concept; -I made a project named 
"SecureMailAssistant" that allows clients to insert encrypted text into an 
email body, or decrypt encrypted text inserted in an email body.

SMA.exe allows a user to compose text and encrypt it, then inserts the 
encrypted text for them, but they must copy/paste to decrypt. It's basically 
for sending/receiving file open passwords, but it's always been how I've 
received/sent license keys for my apps. Now my clients can do similar with 
anyone who has SMA.exe. I haven't officially commercialized it yet, but it's 
ready for that if it takes off.

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

[toc] | [prev] | [next] | [standalone]

#11862

"GS" <gs@v.invalid> wrote

| SMA.exe allows a user to compose text and encrypt it, then inserts the
| encrypted text for them, but they must copy/paste to decrypt. It's 
basically
| for sending/receiving file open passwords, but it's always been how I've
| received/sent license keys for my apps. Now my clients can do similar with
| anyone who has SMA.exe. I haven't officially commercialized it yet, but 
it's
| ready for that if it takes off.
|
  That's a good idea. Encryption without the
drawbacks of TLS. But.... what is NIC? 

[toc] | [prev] | [next] | [standalone]

Page 1 of 3  [1] 2 3  Next page →

Back to top | Article view | microsoft.public.scripting.vbscript

csiph-web