[Houshalter]

Why not just insert the exploit into the first email? What do you gain by identifying the client?

[kecks]

This is an exploit as well, just a different kind. It doesn't require any programming errors in the clients, instead it relies on the non-standardization of clients.