munging

When munging is done, it should be in such a way that a person reading the document (as opposed to a program scanning it) can easily tell that it is a munged e-mail address, and can easily and unmistakably deduce the true e-mail address. Here are four examples of the munging of stangib@reno.com:

stangib at reno dot com
s-t-a-n-g-i-b-at-r-e-n-o-d-o-t-c-o-m
stangibNOSPAM@reno.com
My username is stangib, and the domain name is reno dot com.

Munged e-mail addresses can be useful in Web sites, e-mail correspondence, chat rooms, and postings to newsgroups and special interest groups (SIGs). However, some experts advise against the practice because it may violate the Terms of Service (TOS) of the subscriber's Internet service provider (ISP). Munging should not be used if a response to a particular correspondence is desired. For example, when making an online purchase, the seller typically asks for an e-mail address in order to send a confirmation. If the address is munged, the confirmation will not reach the purchaser.

It is important that munged e-mail addresses not be mistaken for legitimate addresses belonging to third parties. If an innocent person, corporation, or institution is harmed as a result of a munged e-mail address, civil or criminal action could result. Fake usernames or domain names are particularly dangerous in this respect.

The term munging probably derives from the acronym mung (pronounced just as it looks), which stands for "mash until no good." It may also derive from the hackers' slang term munge (pronounced MUHNJ), which means "to alter information so it is no longer accurate."

Read more about munging: - W. P. Basely has published a FAQ about munging. - Matt Curtin explains how munging can be harmful. - SearchSecurity.com has a collection of the Web's best resources on securing e-mail.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT McAfee to acquire Secure Computing McAfee announces its intention to acquire Web and network security company Secure Computing for $465 million. Should a new user have to confirm his or her email address before gaining access? 'Authenticate new user' emails can be helpful tools in preventing spammers from creating a million users that will flood a site. Identity and access... Product Review: Sophos Endpoint Security and Control 8.0 Sophos Endpoint Security and Control 8.0 is a comprehensive endpoint security product, offering antivirus, antispyware, host intrusion prevention,...

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary CAPTCHA  (SearchSecurity.com) A CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) is a test, used with challenge-response systems, that's... challenge-response system  (SearchSecurity.com)