On CBS MoneyWatch: Report: Tiger to Pay Wife $60 Million
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 7 of 34:
Next »
« Previous
Wrong-O
> I assume that this only works with Windows.

Wrong-O...
1) Web-bugs will work with *ANY* web-browser-posing-as-a-mail-client. Doen't matter if it's Outlook or Thunderbird. Both Outlook and Thunderbird can be set not to display images. That effectively disables web-bugs.

Another option is to include
2) Java or
3) Javascript (2 totally different technologies sharing similar names) in the email. Again, it would be a stupid web-browser-posing-as-a-mail-client that would be vulnerable to such an attack.
4) Throw in a read-receipt-request (which should *NOT* be answered by a properly-configured email client).

Those are 4 most-likely vectors. If I sat down and spent a few minutes, I could probably figure out a few more of the 36 methods.
Posted by: Knorthern Knight   Posted on: 09/29/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

Security Companies Violating Privacy  author20@... | 09/28/06
This sort of email tracing should be illegal as well, and the management  DonnieBoy | 09/28/06
I assume that this only works with Windows. I read an earlier report that  DonnieBoy | 09/28/06
I wouldn't count on that  ebrke | 09/29/06
Oh DonnieBoy...  mustang_z | 09/29/06
do you ever know what you are talking about?  balsover | 09/29/06
Wrong-O  Knorthern Knight | 09/29/06
tor  JDThompson | 09/29/06
HP and the Land of the Free  delphi@... | 09/28/06
Shame on HP??  mustang_z | 09/29/06
Sysadmin integrity  Roger Ramjet | 09/29/06
Email belongs to the company  terry W | 09/29/06
Only in certain cases  k12IT | 10/01/06
SOX  adsanders@... | 09/29/06
Interesting, BUT...  Update victim | 09/29/06
Hunh?!...  mustang_z | 09/29/06
It was NOT ILLEGAL  JackPastor | 09/29/06
Don't Be So Sure  adsanders@... | 09/29/06
I hear you !  JackPastor | 09/29/06
Email Policy  Another IT guy | 09/29/06
No Outrage  adsanders@... | 09/29/06
Thus the reason I don't use HTML when reading email...  shawkins | 09/29/06
another solution....  mroonie | 09/29/06
Simple protection: Thunderbird or SeaMonkey  jesup | 09/29/06
Simple protection: Thunderbird or SeaMonkey or Emacs  jesup | 09/29/06
So does  Troll Hunter | 09/30/06
readnotify feedback  bsiddalls@... | 09/29/06
Nullzone readnotify's servers and be done with it...  Boomslang | 10/01/06
Lamix users need not apply, Linux users understand...  Boomslang | 10/01/06
Email Privacy??  Dumber_z | 10/02/06
Precident for Clarity - it should be illegal  ronstephen@... | 10/03/06
Message has been deleted.  myfevertoy | 10/22/06
Warning Will Robinson WARNING!  mikeholli | 10/30/06
this i way to easy to do to outlaw  ses_27 | 11/16/06

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement

SmartPlanet

Click Here