Full Disclosure mailing list archives
Re: Testing DidTheyReadIt.com
From: Thierry Zoller <Thierry () Zoller lu>
Date: Mon, 1 Oct 2007 23:56:18 +0200
Dear Nick, Thank you for your insight on this, I think it should be clear to anybody that if you display just text it should be useless, the stats proof you wrong though. - Some poeple like clicking on links even if they are simply displayed. - Some mailing list mirrors do not remove the image thus I get referes from www sites (talk about cross mail archive injection..or whatever) - Some gateways retrieve the image (possibly prior to sending the mail to the recipient?) A wonderfull way to find out what GW software they use.
This is an example of a service that, in general, should not work, and in future will be increasingly more useless, I think.
Tell this the USCERT, F-SECURE and Microsoft, both registered in the stats; again a wonderfull proof that theory is far behind real life. Stats are still coming in from various areas, mostly MAC users though (no pun intented) Who is interested in the stats ?
In the meantime, all (???) those using it should be asking what kind of data leakage they are exposing themselves to, through possible message content scanning and sender/receiver address usage patterns, among others.
-- http://secdev.zoller.lu Thierry Zoller Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Testing DidTheyReadIt.com Dude VanWinkle (Oct 01)
- <Possible follow-ups>
- Re: Testing DidTheyReadIt.com Thierry Zoller (Oct 01)
- Re: Testing DidTheyReadIt.com Anshuman G (Oct 01)
- Re: Testing DidTheyReadIt.com Gautam (Oct 01)
- Re: Testing DidTheyReadIt.com James Matthews (Oct 01)
- Re: Testing DidTheyReadIt.com Anshuman G (Oct 01)