pimplink

This is done easily using 1 of 2 ways...

the easier way is to have an email guesser which bombards an email login form with random character combos and waits for a DENIAL message.

If the DENIAL message says "INVALID PASSWORD" instead of "no such user" or something like that then the email address is recorded and a new string is sent.

This harvesting method's been around for a long time and some systems guard against it.


The other method is data overflow....

__________________