RE: readnotify.com

["evb" <swiver () cox net>]

The primary way readnotify works is though the use of iframes, not web bugs.
To say that is NOT to say that readnotify does NOT use webbugs.  Instead,
it's to say that web bugs are not the primary way.  Iframes are the primary
way because they are harder to defeat than web bubs.

Email isn't very good for nuance, is it?

Eric
www.risk-averse.com


:-----Original Message-----
:From: Larry Offley [mailto:lucullus () telus net] 
:Sent: Wednesday, January 25, 2006 1:43 AM
:To: hfebelingjr () lycos com
:Cc: security-basics () securityfocus com
:Subject: Re: readnotify.com
:
:Yes and no. First we need to know how they know you read your 
:e-mail. I common way is the use of a "Web bug" these usually 
:consist of a small
:1x1 image file usually the same color as the back ground of a 
:html e-mail message or transparent. This method is easy and 
:works on all platforms (Linux/mac/pc). If you use a mail 
:client that doesn't auto download referenced images, then the 
:the server hosting the image can't tell you have read the 
:message. Read the provided wiki link for more on the subject.
:
:Wiki on web bugs   http://en.wikipedia.org/wiki/Webbug
:
:Larry Offley
:
:Ebeling, Jr., Herman Frederick wrote:
:> -----BEGIN PGP SIGNED MESSAGE-----
:> Hash: SHA1
:>
:> Does anyone know anything about a web site called 
:> (http://www.readnotify.com/)?  If so does anyone know of anyway to 
:> prevent it from sending it's return receipts to the sender?
:>
:> Herman
:> Live Long and Prosper
:>  ___________________          _-_
:>  \==============_=_/ ____.---'---`---.____
:>              \_ \    \----._________.----/
:>                \ \   /  /    `-_-'
:>            __,--`.`-'..'-_
:>           /____          ||-
:>                `--.____,-'
:>
:> -----BEGIN PGP SIGNATURE-----
:> Version: PGP 8.0.3
:>
:> iQA/AwUBQ9Vl5B/i52nbE9vTEQI9XgCg3Nhg6Fvo0Eb8SNifD9BPzKSM4csAnivR
:> LPCQGjXz9OhMxTZBZHXwZBQM
:> =IEYv
:> -----END PGP SIGNATURE-----
:>
:> 
:----------------------------------------------------------------------
:> ----- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The 
:> Norwich University program offers unparalleled Infosec management 
:> education and the case study affords you unmatched 
:consulting experience.
:> Tailor your education to your own professional goals with degree 
:> customizations including Emergency Management, Business Continuity 
:> Planning, Computer Emergency Response Teams, and Digital 
:Investigations.
:>
:> http://www.msia.norwich.edu/secfocus
:> 
:----------------------------------------------------------------------
:> -----
:>
:>
:>   
:
:---------------------------------------------------------------
:------------
:EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The 
:Norwich University program offers unparalleled Infosec 
:management education and the case study affords you unmatched 
:consulting experience. 
:Tailor your education to your own professional goals with 
:degree customizations including Emergency Management, Business 
:Continuity Planning, Computer Emergency Response Teams, and 
:Digital Investigations. 
:
:http://www.msia.norwich.edu/secfocus
:---------------------------------------------------------------
:------------
:


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------