RE: www.readnotify.com

["Ebeling, Jr., Herman Frederick" <hfebelingjr () lycos com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----Original Message----
From: Dan Denton [mailto:ddenton () PAYLESSOFFICE com]
Sent: Friday, 27 January, 2006 10:11
To: hfebelingjr () lycos com; Larry Offley
Cc: security-basics () securityfocus com
Subject: RE: www.readnotify.com

: It was my understanding that the overriding issue was not to block the
: emails entirely, but to prevent the accessing of the hidden image so as
: not to show the email was read.
: 
: I'll concede that you would have to know the addresses of the web
: servers providing the image, but since no one has yet provided those,
: I'd say the tactic of blocking web access to www.readnotify.com is a good
: place to start (or if you happen to look at the HTML source, block
: domain name of the target image).
: 
: With the various ways SPAMMERs use to spoof the source of an email, I
: think it would be more difficult to rely solely on the blocking of the
: email to solve your problem.
: 

Dan,

        This is true, but if what others have said about them using URLs to
redirect one to where they can read E-Mail sent to 'em.

        That sounds like a LOT of "work" to block www.readnotify.com tricks, i.e.
webbugs, iFrames, and .WAV files.

        This is true, but I think that it's safe to say that we don't want to
"block" their E-Mails per se, but to as you've said in yer first paragraph
just block their tracking methods.

Herman
Live Long and Prosper
 ___________________          _-_
 \==============_=_/ ____.---'---`---.____
             \_ \    \----._________.----/
               \ \   /  /    `-_-'
           __,--`.`-'..'-_
          /____          ||-
               `--.____,-'

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3 - not licensed for commercial use: www.pgp.com

iQA/AwUBQ9pWkh/i52nbE9vTEQLZVwCgnLeF96b0bLV/RJs3MgRRJ1/YLFMAoK7C
J4h7S+0R4Pj12HYR8ze6/7vQ
=cau5
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------