mail admins?

Tue Apr 21 22:33:42 UTC 2020

Neil Hanlon <neil at shrug.pw> wrote:
> I think you just need to let scripts run in your browser for nanog.org.
> 
> It uses Javascript to add the emails in after the fact, it appears.

Yep.  It's obfuscation via an XOR with a key included
in the href.  So if you do not want to run javascript,
you can grab the href, pull out the key, xor the
remaining obfuscated string with it and you get the
address.

I.e.:

for email in $(curl https://archive.nanog.org/list | sed -n -e 's/.*cfemail="\(.*\)".*>/\1/p'); do n=0; for b in $(echo "${email}" | sed -e 's/\(..\)/\1 /g'); do if [ $n -eq 0 ]; then key=$b; else printf "\\$(printf "%o" $(( 0x${key} ^ 0x${b})) )"; fi; n=1; done; echo; done

It's all so obvious, isn't it?

-Jan

"This Email As A Tweet":
https://twitter.com/jschauma/status/1191062800082317312