RE: readnotify.com

["Dan Denton" <ddenton () PAYLESSOFFICE com>]

Would not the easiest way to block the notification be to block access
to that URL/Address entirely on your gateway device (router, proxy,
etc...)? Blocking access to that address should block the accessing of
the image, therefore no access to the image would be logged on their
server.

Dan Denton
Information Technology Manager, CCNA
Pay-LESS Office Products



-----Original Message-----
From: Larry Offley [mailto:lucullus () telus net] 
Sent: Wednesday, January 25, 2006 2:43 AM
To: hfebelingjr () lycos com
Cc: security-basics () securityfocus com
Subject: Re: readnotify.com


Yes and no. First we need to know how they know you read your e-mail. I 
common way is the use of a "Web bug" these usually consist of a small 
1x1 image file usually the same color as the back ground of a html 
e-mail message or transparent. This method is easy and works on all 
platforms (Linux/mac/pc). If you use a mail client that doesn't auto 
download referenced images, then the the server hosting the image can't 
tell you have read the message. Read the provided wiki link for more on 
the subject.

Wiki on web bugs   http://en.wikipedia.org/wiki/Webbug

Larry Offley

Ebeling, Jr., Herman Frederick wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Does anyone know anything about a web site called 
> (http://www.readnotify.com/)?  If so does anyone know of anyway to 
> prevent it from sending it's return receipts to the sender?
>
> Herman
> Live Long and Prosper
>  ___________________          _-_
>  \==============_=_/ ____.---'---`---.____
>              \_ \    \----._________.----/
>                \ \   /  /    `-_-'
>            __,--`.`-'..'-_
>           /____          ||-
>                `--.____,-'
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.0.3
>
> iQA/AwUBQ9Vl5B/i52nbE9vTEQI9XgCg3Nhg6Fvo0Eb8SNifD9BPzKSM4csAnivR
> LPCQGjXz9OhMxTZBZHXwZBQM
> =IEYv
> -----END PGP SIGNATURE-----
>
> ----------------------------------------------------------------------
> -----
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting
experience. 
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business Continuity
Planning, 
> Computer Emergency Response Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------
> -----
>
>
>   

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting
experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity
Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------