Search:  

 
 
   News
newer
story category E-mail's New War
Is e-mail privacy completely lost?
(old news - 10:56AM Friday Jul 30 2004)
tags: security · software
Web Bugs, or tiny, 1 pixel by 1 pixel transparent GIF images embedded in HTML emails, were long used by spammers to determine if spam recipients were actually reading spam (as per server image requests). Now that same technology (and others) is being marketed to consumers, and starting a new debate over the privacy and sanctity of e-mail. Security Focus takes a look at dubious new services like "Didtheyreadit" or "ReadNotify" and the steps e-mail client developers are taking to keep these new services at bay.

Related:
  1. Monday Morning Links
  2. Firefox Add-On Simulates Great Firewall Of China
  3. Zone Alarm Pro Free Just For Today
  4. Microsoft Discontinuing OneCare
  5. Using PS3's To Forge Site Certificates
  6. Wednesday Evening Links
  7. FoxNews.com Serving Up Infected Ads?
  8. Uh, Mom? The Air Force Just Attacked Our PC
Forums » E-mail's New War
view: topics flat text 
Post a:

Ark

join:2002-06-08
Hudsonville, MI
·AT&T Midwest

Good luck

Good luck

dervari

join:2000-01-17
Atlanta, GA
clubs:

1 edit

Re: Good luck

For the small percentage of people that use Mozilla, great. But the vast majority of corporate users are standardized on Outlook with an Exchange server.

Also, some of these user iframes, which are harder to defeat than simple images.

Ark

join:2002-06-08
Hudsonville, MI

Re: Good luck

Oh well. I'm protected from email bugs, as I want to be. What do I care if corporate users still want to use outlook and be trackable? Their choice.

LordMalak

join:2003-07-02
Brazil
·Net Virtua

Re: Good luck

said by Ark See Profile:
Oh well. I'm protected from email bugs, as I want to be. What do I care if corporate users still want to use outlook and be trackable? Their choice.

That was an ignorant thing to say. Most employees have no say so on the software they use at work. Sometimes, not even system admins have that luxury due to the company's contractual obligations with the software provider (MS, in the case).

Depending on employees' access level, they may not even be able to turn off HTML in Outlook.

Joe Schmoew

@208.44.x.x

Re: Good luck

OK well, fine. But SOMEONE chose to use the crappy MS stuff. SO again, their choice - just a different they than you're thinking.

And I agree, screw those people. They have done nothing for the internet or contributed to eliminating the problems with it ever since Microsoft got on board, so screw them. Let them get all the virii, web bugs, spyware, and patches they can stand from Gates & Co.

I don't use Outlook and wouldn't use it if you paid me. Just look at the almost daily reports of new bugs or security holes in it, look how they tried to make it part of the OS (oh, yeah - THAT's a good idea...). And then look how they've forced it down people's throats with forcing it's inclusion in the OS by the OEM's (you could read about it in their anti-trust trial) and as you say, negotiating contracts that FORCE the use of CRAP in corporate networks.

Still, someone in those corporations is making a choice. A bad choice for everyone on the net.

Screw them and whatever happens to them.
LrdVader
Premium
join:2003-12-18
San Diego, CA

said by Ark See Profile:
Oh well. I'm protected from email bugs, as I want to be. What do I care if corporate users still want to use outlook and be trackable? Their choice.

Thunderbird apparently still gets tracked, even with those settings:
»www.candygenius.com/track_the_tracker

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: Good luck

said by LrdVader See Profile:
said by Ark See Profile:
Oh well. I'm protected from email bugs, as I want to be. What do I care if corporate users still want to use outlook and be trackable? Their choice.

Thunderbird apparently still gets tracked, even with those settings:
»www.candygenius.com/track_the_tracker

Only if you go in an enable javascript, but why would you do that??

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

candygenius

@grandenetworks.ne

Re: Good luck

Even with JavaScript disabled and loading of remote images disabled, some of the services still sent the receipt back when I tested it in Thunderbird. All I can say is, test them yourself. Horde was the only reader that blocked them all 100% of the time.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

said by dervari See Profile:
For the small percentage of people that use Mozilla, great. But the vast majority of corporate users are standardized on Outlook with an Exchange server.

Also, some of these user iframes, which are harder to defeat than simple images.

That's why it's good to install an HTML sanitizer module on your SMTP gateways. Strips out or neuters such tags without the end user having to change anything in their client.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

GlobalMind
Domino Dude, POWER Systems Guy
Premium
join:2001-10-29
Hollywood, FL

Well, "vast majority" may be a bit too generous. The numbers of Exchange users vs Lotus Notes/Domino users is roughly equal with one or the other stepping ahead depending on the day/hour. I think recently MS's claimed number was finally higher...but not so much that they completely blow away the rest of the market.

And before Exchange 5.5 or 2k users try to go through the pain of a 2003 upgrade...they should seriously look at ND 6.5.

K.
--
TheGlobalMind.com 
"On a clear disk you can seek forever"

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX

said by dervari See Profile:
For the small percentage of people that use Mozilla, great. But the vast majority of corporate users are standardized on Outlook with an Exchange server.

Also, some of these user iframes, which are harder to defeat than simple images.

Pegasus Mail also makes no internet connections to fetch online linked images unless the user instructs so. It is free as well.

http://www.pmail.com
RayW
Premium
join:2001-09-01
Layton, UT
clubs:
·XMission

Re: Good luck

said by DrTCP See Profile:

Pegasus Mail also makes no internet connections to fetch online linked images unless the user instructs so. It is free as well.

»www.pmail.com

Amen! Good product, but needs more smarts to use correctly.
--
I am not lost, I find myself every time.
wbhigdon

join:2003-10-29
Bessemer, AL

Click for full size
said by dervari See Profile:
For the small percentage of people that use Mozilla, great. But the vast majority of corporate users are standardized on Outlook with an Exchange server.

Also, some of these user iframes, which are harder to defeat than simple images.

Outlook 2003 has this behaivor by default....

FLECOM
Bay Networks Freak
Premium
join:2003-03-03
Miami, FL
my outlook is set to not display images or any advanced html...

no problems

if i wanted to be uber paranoid you can just set it to text only or whatnot

TheGiant
Next Year Is Here.

join:2001-03-28
Knoxville, TN

Upgrade time

This alone is good enough reason to upgrade. Exchange 2003 here I come. Besides this NT domain is a nightmare..
--
Keep America safe Bush 2004 »www.georgewbush.com/KerryMediaCenter/
DSLrgm
Premium,MVM
join:2002-08-22
Oak Park, MI

Re: Upgrade time

said by TheGiant See Profile:
This alone is good enough reason to upgrade. Exchange 2003 here I come. Besides this NT domain is a nightmare..
Go to Samba 3.0 instead!

Nerdtalker
Working Hard, Or Hardly Working?
Premium,MVM
join:2003-02-18
Tucson, AZ
clubs:
·Comcast


2 edits

Re: Good luck

Outlook has the same thing, which I have enabled:

--
Touch a thistle timidly, and it pricks you; grasp it boldly, and its spines crumble. -William S. Halsey

dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
·Comcast


1 edit

I don't use an email client

I use web based email. Spam? Don't even look at it. (See pic) See the link that says [Empty]? I click it and it's all taken care of. I never open Spam(Bulk) email.
--
Nuke 'em all, let God sort 'em out.

Morac

join:2001-08-30
Riverside, NJ
·Comcast

Re: I don't use an email client

Yahoo's spam filtering is impressive, but not foolproof. I've had legitimate emails show up in my Bulk folder, which is why I also check it before emptying it.

Lately I've also seen junk email with only a subject (usually something like "read this" or "hi there") and no body showing up in my Inbox. Kind of annoying.
--

The Comcast Disney Avatar has been retired.

antiphishing
Phishing Scam Terminator
Premium
join:2004-06-09
Wilkes Barre, PA

Re: I don't use an email client

_____________________________________________________________
Yahoo's spam filtering is impressive, but not foolproof. I've had legitimate emails show up in my Bulk folder, which is why I also check it before emptying it.
____________________________________________________________

This is the biggest problem with Yahoo email besides the
excessive advertisements.

For every one hundred legitimate emails that I receive, about ten to twenty end up in the bulk folder. This is not good by any standard.
--
Dslreports.com Forum No-Spin zone starts here.
»www.antihotmail.com
spammers_are_scumbags@antihotmail.com
dave
Premium,MVM
join:2000-05-04
not in ohio
·Verizon Online DSL

quote:
I use web based email
Or, in other words, you use a web browser to use an email client which is running on a web server.

I don't see how that makes you immune from web bugs. Quite the reverse, I'd say.

(Sure, you can ignore spam, but that has nothing to do with whether you're using a web-based email client or a local email client).

nightdesigns
Gone missing, back soon
Premium
join:2002-05-31
AZ
·Cox HSI

How they do it?

I'm not trying to start a war here or anything, but I think for a small business like my family runs (ebay) this is a great idea. With ebay especially, a lot of people "claim" that they don't get the e-mail's to get out of an auction. If we could tell if they at least read them or not, it would always build a nice case in our favor. I have an idea of how it works, but does anyone know of a place that gives specifics?

Maxo
Your tax dollars at work.
Premium,VIP
join:2002-11-04
Tallahassee, FL
clubs:
·Embarq

Re: How they do it?

I don't know about how to track specific people viewing the gif image but if you run a web-server you can simply look at your server logs and count how many times that 1x1 gif image was requested. I suppose you could have a folder in your root directory called /gif/ and in it images such as 1.gif 2.gif 3.gif etc. Put a unique one in each persons e-mail. If you see someone accessed 3.gif and that gif image was assigned to the person in question then you know they received and read your e-mail.
--
"Affluence separates people. Poverty knits 'em together. You got some sugar and I don't; I borrow some of yours. Next month you might not have any flour; well, I'll give you some of mine." - Ray Charles

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: How they do it?

said by Maxo See Profile:
I don't know about how to track specific people viewing the gif image but if you run a web-server you can simply look at your server logs and count how many times that 1x1 gif image was requested. I suppose you could have a folder in your root directory called /gif/ and in it images such as 1.gif 2.gif 3.gif etc. Put a unique one in each persons e-mail. If you see someone accessed 3.gif and that gif image was assigned to the person in question then you know they received and read your e-mail.

Doesn't even have to be that complex. You can use one image file (it's only a single pixel any way) that is mapped to an inifinite number of URLs. A rewriting engine in the server would make sure the email recpient didn't get a broken link message and you would have an entry in your log for the original image request.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

Ark

join:2002-06-08
Hudsonville, MI
·AT&T Midwest

With apache/PHP you create .htaccess with the line "AddType application/x-httpd-php .gif" and have the file track.gif (which is a PHP script) check $_GET[guid] then spit out the binary contents of a transparent 1x1 GIF with a header like Content-Type: image/x-gif or whatever. Then you can use track.gif?guid=293042903428 and each email gets a unique ID. Its nothing really fancy at all.
Just one of many simple examples though.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

said by nightdesigns See Profile:
I'm not trying to start a war here or anything, but I think for a small business like my family runs (ebay) this is a great idea. With ebay especially, a lot of people "claim" that they don't get the e-mail's to get out of an auction. If we could tell if they at least read them or not, it would always build a nice case in our favor. I have an idea of how it works, but does anyone know of a place that gives specifics?

As someone who purchases stuff on eBay, if I found such bugs in your correspondence to me, it would be the LAST purchase I made from you. It would also result in a negative feedback.

Since the mail servers that I use replace such images with a warning icon, I know when people try to bug emails sent to me. So, it would be fairly easy for me to know if you did try to track me.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

nightdesigns
Gone missing, back soon
Premium
join:2002-05-31
AZ
·Cox HSI

Re: How they do it?

said by nixen See Profile:

As someone who purchases stuff on eBay, if I found such bugs in your correspondence to me, it would be the LAST purchase I made from you. It would also result in a negative feedback.

How can you justify giving a negative feedback on that. It's not against ebays T&C's to use tracking.

If e-mail tracking is an issue, then do you also find it an issue that we put tracking numbers on all our packages without telling the customer? This has saved us on several occasions when people have claimed that they didn't get their item.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: How they do it?

said by nightdesigns See Profile:
said by nixen See Profile:

As someone who purchases stuff on eBay, if I found such bugs in your correspondence to me, it would be the LAST purchase I made from you. It would also result in a negative feedback.

How can you justify giving a negative feedback on that.
If you take actions that upset me as a customer, then I will reflect my opinions in my feedback.

said by nightdesigns See Profile:
It's not against ebays T&C's to use tracking.
And it's not listed that you are allowed to, either. The fact that you are seeking to surreptitiously track my activities is ethically questionable and repugnant to my sensibilities (and probably other people's as well).

said by nightdesigns See Profile:
If e-mail tracking is an issue, then do you also find it an issue that we put tracking numbers on all our packages without telling the customer? This has saved us on several occasions when people have claimed that they didn't get their item.
Hardly the same thing, now is it? The tracking on the package is not done surreptitiously. There is no potential for additional data being collected that I didn't authorize. The only data you get is who signed for it, where and when. The fact that I signed for it shows that I agreed to the terms.

When you bugging emails removes said choice.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

nightdesigns
Gone missing, back soon
Premium
join:2002-05-31
AZ
·Cox HSI

Re: How they do it?

said by nixen See Profile:

If you take actions that upset me as a customer, then I will reflect my opinions in my feedback.

You can't justify giving a negative because you didn't like the person or how they conducted business, especially if you get your product as described in a timely manner.

And i never said I was using it to track your activities, I'd only be using it as a read receipt, that's all.

The reason that I'm not using read receipt is because mainly my DB solution doesn't support the send end of it, but also not all platforms support it. For the most part, only Outlook/exchange and Eudora users support the feature, while most of our users use some type of webmail or AOL.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: How they do it?

said by nightdesigns See Profile:
said by nixen See Profile:

If you take actions that upset me as a customer, then I will reflect my opinions in my feedback.

You can't justify giving a negative because you didn't like the person or how they conducted business, especially if you get your product as described in a timely manner.
Actually, yes, I can justify it. The feedback system is provided for exactly that: to allow parties to a transaction to express whether the experience was positive or negative (or neutral - but eBay seems to treat that the same as a negative).

said by nightdesigns See Profile:
And i never said I was using it to track your activities, I'd only be using it as a read receipt, that's all.
Yes, but the moment you embed that tracker in your email, a whole BUNCH of data gets sent back to you. I have no way of knowing what is actually used and what is discarded. I have to trust that you won't abuse that information. However, given that you would have attempted to do something to me surreptitiously, what is my basis of trust. None: you have already violated any trust I might have had in you. Therefore, I have to assume that you're collecting the same amount of information as the spammer slimebags that 'pioneered' this technique.

said by nightdesigns See Profile:
The reason that I'm not using read receipt is because mainly my DB solution doesn't support the send end of it, but also not all platforms support it. For the most part, only Outlook/exchange and Eudora users support the feature, while most of our users use some type of webmail or AOL.
Really? That's funny, because I've used a number of email systems that have supported MDN (RFC 2298). In fact, someone at a company I deal with sent me a message just today that included an MDN request in it. My mail client honored it just fine. And, it gave me the option to send the acknowledgement. Oh, and just for grins, I tested the functionality with a web mail tool. Guess what? MDN worked there, just fine, as well. So, don't whine about MDN only working on a limited number of mail clients (particularly given that you mention OutLook, the most used mail client out there).

So, why is it you are getting upset that your attempts at surreptitiously invading people's privacy is being met with resistance? Wouldn't you be just a little pissed off if someone wanted to just be able to look into the windows of your house without asking you, first? That would get you shot in some jurisdictions.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

click_310
Eat my shorts

join:2002-12-06
Savannah, GA

Re: How they do it?

Oh, and just for grins, I tested the functionality with a web mail tool.

Its never worked for me. Using MS exchange at work and sending an email to a hotmail or yahoo account. Never got a read recipt back.Wonder what I'm doing wrong...

Hey by the way "nightdesigns" if i ever got an email from your ebay store with a 1x1 image. I'd mention that in the feedback too. None of us mind being tracked - as long as we know that its being done. And remember I have to have some amount of faith/trust in you to send you the money for whatever I bought from your store.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: How they do it?

said by click_310 See Profile:
Oh, and just for grins, I tested the functionality with a web mail tool.

Its never worked for me. Using MS exchange at work and sending an email to a hotmail or yahoo account. Never got a read recipt back.Wonder what I'm doing wrong...
Hotmail and Yahoo appear to strip the MDN headers out. Other, open source tools, don't seem to.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

nightdesigns
Gone missing, back soon
Premium
join:2002-05-31
AZ
·Cox HSI

said by click_310 See Profile:
Hey by the way "nightdesigns" if i ever got an email from your ebay store with a 1x1 image. I'd mention that in the feedback too. None of us mind being tracked - as long as we know that its being done. And remember I have to have some amount of faith/trust in you to send you the money for whatever I bought from your store.

We're as open with people as possible. The only thing we don't tell them about is the tracking number on the package itself. If they specifically ask for it, we'll gladly give it to them. Since adding the tracking to all the packages, our complaints of missing packages have dropped by 90+%. And the other 10% we're able to tell exactly where in transit their package is?

starstuff
Fly By Wire
Premium
join:2001-12-05
Mcallen, TX

said by nightdesigns See Profile:
With ebay especially, a lot of people "claim" that they don't get the e-mail's to get out of an auction. If we could tell if they at least read them or not....

ReadNotify (see main article link) is the mail system for you. You can track everything, when it was opened, how many times, etc.

nightdesigns
Gone missing, back soon
Premium
join:2002-05-31
AZ
·Cox HSI

Re: How they do it?

said by starstuff See Profile:
ReadNotify (see main article link) is the mail system for you. You can track everything, when it was opened, how many times, etc.

I checked it out, and while it was interesting, i wanted something that would interface with our existing DB system as well. We also send about 6000 e-mail's a year and I wanted to be able to track each one (sometimes multiple e-mail's to the same address).

-ja

LordMalak

join:2003-07-02
Brazil
·Net Virtua

I think that's an unfair way of doing business. Ebay has several ways to help you determine if a buyer/seller is legitimate. I've been buying and selling on Ebay on and off for about 6 years without a problem.

A more ethical, but less reliable way of accomplishing this would be requesting reading receipts from the mail server through Outook. It's not reliable because the receiving party's ISP must be using Exchange AND have the feature enabled as well.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: How they do it?

said by LordMalak See Profile:
A more ethical, but less reliable way of accomplishing this would be requesting reading receipts from the mail server through Outook. It's not reliable because the receiving party's ISP must be using Exchange AND have the feature enabled as well.
Actually, Exchange/Outlook are not requirements.

-tom
--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"
B
Premium,MVM
join:2000-10-28


2 edits

Load of Crap

I'm sorry, but I completely disagree with the SecurityFocus author.

For a change, innovative use of Internet and e-mail and web technology is being used to BENEFIT users, rather than hurt them, and this guy is complaining?

I think it's GREAT that those services have been thoughtful enough to take what was a mere spammer trick and turn it into a useful service.

Is it nice that normal Internet e-mail is virtually untrackable? Sure -- but who says it has to be? If you're savvy enough to care about DidTheyReadIt, you're probably already NOT reading your e-mail in HTML, or you're fully able to find other workarounds.

If you're NOT savvy enough to care, then you probably don't care and you already think that Bill Gates can tell how many times you forwarded his cookie recipe...

Just because the author, or I, am quite guarded about what we accept in e-mail does not mean that a legal service using existing technologies in an innovative fashion, in a way that benefits the USER of that service, should be discouraged!

-- B

Edit: Not sure about Moz, but I'm nearly certain that Pegasus Mail's stringently safe HTML mode does everything his beloved KMail can do vis a vis iframes, if not more. It would have been nice for him to have mentioned a Windows program that addressed his concern.
--
In a realm outside causality and function
dave
Premium,MVM
join:2000-05-04
not in ohio
·Verizon Online DSL

Re: Load of Crap

The problem is that there is no "informed consent".

The sender lays a trap that the less-wary recipient may fall into without knowing it. My sympathies are entirely with the recipient in this case.

Even if most of the email in the world were not sent by bottom-feeding scumsuckers, I'd still be against it on grounds of privacy. An acceptable implementation would allow me to control (in an obvious way, i.e., a "do not sent receipts" switch, not requiring arcane knowledge like "html email sucks arse") whether or not a receipt is to be sent.

In fact, I believe SMTP has delivery receipt mechanisms which are under control of the user, at least in Outlook Express. Web bugs are an attempt to coax a receipt out of someone who has deliberately configured his mail reader to not return receipts.
B
Premium,MVM
join:2000-10-28

Re: Load of Crap

Well, yes and no.

There's a 2003 proposed extension for receipts at »www.faqs.org/rfcs/rfc3461.html which is an update of »www.faqs.org/rfcs/rfc1891.html

But first, these are really DELIVERY receipts, not READ receipts, and second, the user is NOT typically in control of them (since they work at the server level).

The "read receipts" supported by internal Exchange users and by mail readers like Pegasus Mail are NOT standards as far as I know, nor are they supported in great numbers.

The only reason you can't control DidTheyReadIt and ReadNotify behavior at the client side is precisely because there ISN'T such a standard -- I don't think it's ENTIRELY because they're trying to be sneaky about it (although they are).

Why do you think you're entitled to receive e-mail without certain KINDS of HTML? You do not have to read any particular message, these things are NOT viral nor even really malicious, and I don't really see your point, even as privacy-minded as I am. (Would you somehow object to individual users adding their OWN tracking GIFs to HTML messages, resident on their OWN servers?)

Anyway, I'm not saying it's right, or particularly polite to use these services, but I don't find them evil either.

See also:
quote:

"Contrary to popular belief Read-Receipts are not part of the Internet Mail Standard. Consequently one should avoid relying on them except perhaps between email exchanges between agreeable parties. The requesting of a receipt neither guarantees that the massage has not been read if a receipt does not arrive; nor does it mean a receipt has been read if a receipt does return!"
»www.ucs.ed.ac.uk/usd/scisup/faq/···pts.html

-- B
--
In a realm outside causality and function
dave
Premium,MVM
join:2000-05-04
not in ohio
·Verizon Online DSL

Re: Load of Crap

said by B See Profile:
But first, these are really DELIVERY receipts, not READ receipts, and second, the user is NOT typically in control of them (since they work at the server level).
A 'read' receipt is impossible to implement, unless maybe you give the user a short quiz to detect whether or not they actually read the material, rather than simply opening and closing it without reading it.

But I take your point: a receipt can be returned at any point: by the server, when delivered to the mailstore; by the server, when a POP3 client collects the message; by the client, when delivered to the local mail storage; by the client, when the message is opened, etc.

Thanks for the pointers to RFCs and Pegasus documentation, btw.

mattman

join:1999-10-25
Lafayette Hill, PA

Outlook too

Outlook 2003 can be set to block images.

Jason Levine
Premium
join:2001-07-13
Albany, NY

Yahoo mail and image blocking

I like how Yahoo mail handles images in HTML e-mails. If it is set to block images, a link is provided to override the setting and show all graphics in the e-mail message. The override is a one time deal. You need to click it each time you view the message. This is useful to view the few newsletters that I subscribe to that send out only HTML versions.
--
-Jason Levine
http://www.jasons-toolbox.com/
http://www.PCQandA.com/
http://www.urateit.com/
SippinWhisky

join:2004-01-31
Wilmington, NC

E-mail tracking? I love it.

I use one of the mentioned services--usually not with friends and acquaintances, but in business-related matters. More than once, the tracking service has been very helpful.

For example, take the firm that kept saying they were not receiving my e-mails and thus nothing in my favor was happening and my queries were going unanswered. I could hear the shock [and dismay?] in the person's voice when I telephoned only seconds after the opening of the last e-mail sent to them.

When they answered the phone, I told them they had opened my e-mail at a specific time and could verify that they had indeed [this time] received it. Such was the effect of my having that information I had no more problems with that particular firm.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA

Re: E-mail tracking? I love it.

So, not only do you do business with scumbags, you do business with dumb, careless scumbags.

-tom
Shootist
Premium
join:2003-02-10
Decatur, GA

It's very simple

Really I don't understand. One way to block ALL of this K-rap is to set whatever Email program you use to READ IN PLAIN TEXT ONLY and to not use a Preview Pane. Then just delete all the K-rap that comes in and set your Email program to delete it off of your ISP server.

How hard is that. I do not want HTML email from anyone or any group.
Yes send me the pictures you took. I will save them to my HDD and then scan them a second time, seeing as all Email is scanned when received, with my AV program and if they're clean I'll look at them.

Yes the uninformed will be prayed upon, as always, but I will not.
--
Shooter Ready--Stand By BEEP ********
DSLrgm
Premium,MVM
join:2002-08-22
Oak Park, MI

Some but not all

I like those email sales from TigerDirect. I have been able to get some good things as a result.

Also my nephew keeps putting jpg comics on his server then send them to me this way.

So I would want to allow this for selected domains (tigerdirect.com) but block everyone else (especially microsoft.com ).

I have to see if Eudora 6.x has anything for this level of control.

TamaraB
Question The Current Paradigm
Premium
join:2000-11-08
Brooklyn NYC
·Verizon Online DSL

An easy solution

Rusko enterprises PEER1-RUSKO-06 (NET-69-90-152-0-1)
69.90.152.0 - 69.90.152.255

Destination Gateway Genmask Flags MSS Window irtt Iface
69.90.152.0 - 255.255.255.0 ! - - - -

We have had these bozos null-route since they crawled out from under their rock

Bob

--
Motor Vessel - Tamara B.
43' Long-Range Trawler
Cape Elizebeth ME.
See her Here.
jdmatl

join:2000-04-27
Deerfield Beach, FL

Admuncher blocks em

Best $25.00 I have ever spent!

www.admuncher.com

Remove extremely small images (web bugs) -
Removes images dimensioned around one pixel square and retrieved from a foreign server. These images are almost invariably used to gather statistics on visitors to a site and can be safely removed.

viperpa33s
Why Me?
Premium
join:2002-12-20
Bradenton, FL
·Bright House

Bunch of Bologna

If a person wants to be tracked, emails in this case, then so be it. I for one like most of us don't want it. I see people making excuses why this is a good thing. I see no benefit for the consumer, the only benefit is to the company or person sending the email.

To say they want to know if a person received an email, that's a bunch of bologna. A company that sends you a bill through snail mail don't need to know if or when you received it just when they sent it.

As long as there are tools available to give me a choice, then I am not worried about it. The only thing is how fast we stay ahead of the game in world where everyone has to know what everyone else is doing.

AnonProxy
Proxy of Anon
Premium
join:2001-05-12
ß

Privacy completely lost? There never was any...

You guys gotta be kidding there never was any privacy.
netscape 6

join:2002-03-07
Constantine, MI

Re: Privacy completely lost? There never was any..

said by AnonProxy See Profile:
You guys gotta be kidding there never was any privacy.

You sure? Can I look through your stuff then?

AnonProxy
Proxy of Anon
Premium
join:2001-05-12
ß

Re: Privacy completely lost? There never was any..

If you aren't smart enough to understand that there was never really any privacy on the Internet, then and there is no real more or less now...then I can't help you.
netscape 6

join:2002-03-07
Constantine, MI

Re: Privacy completely lost? There never was any..

So would you send me a log of the site you visit? I mean if there is no privacy you won't be losing anything.

rcarter3
Nap Time Yet?

join:2001-11-01
Royal, AR
clubs:

Just for info for any who use mozilla software

I have run a small test on the 2 email tracking programs mentioned in the thread here using mozilla t-bird mail program and avast anti-virus with the following results:

didtheyreadit.com

Mail came through and was readable. Header looks funny when compared to regular mail from same sender without the tracking program. After 20 minutes wait the didtheyreadit.com site still reported the email as unread and I suspect it will continue to do so as t-bird refused to download the remote image from their site. (just my suspicion on the matter not truly verified if they employ a small transparent gif file or not)

Read notify.com

Mail was caught by my avast email scanner as suspicious due to an iframe tag I let it come thru and opened the mail and Readnotify recorded the email as opened the date and time and my probable location. I reran the test and let avast kill the mail and of course readnotify shows that mail as still unopened.

For me that is enough protection from prying eyes who want to know if, when, and where I open and read email from them. To the person who stated there is no privacy with email that is in principle true but in reality there is a modicum of privacy for those of us who wish to have it and are willing to stay current on what we can do to keep it and what we will not allow in order to prevent its disruption.
--
Teamwork is essential, it allows you to blame others

el scorcho
Cupid Stunt

join:2000-12-01
Elmhurst, NY
clubs:

not such a big deal

maybe it was the fact that my first 2 years of internet life were solely AOL-based, but i don't mind the 'privacy' lost on web bugs all that much. it all depends on moderation and how one decides to configure their email client.

using the default setup in thunderbird (mozilla's opensource email client), a combination of spam-tagging and a careful eye are enough to spot legitimate consumer tags and spam weblogs. spam-tagged messages do not show images under any circumstances, while 'trusted' email does. the more anal type could block all remote loading, only allowing a whitelist to decide what email images should be shown.
--
Hardware_411: what are you talking about...i dont want deal with newegg.com no more just watch they are going to be garbage in a few months.

Dave's Stupendous Genius

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..

Since when

Since when was e-mail ever safe? Not in my lifetime. With the right equipment it can be stored, decrypted, and read in a matter of just seconds or less. Keys or not.

It is either/both ignorant/unwise to assume that it ever will be.
--
ASUS SK8N nForce3 - 8GB PC2700 - AXP 64 3400+ - nVidia 6800 Ultra w/512mb - CL Audigy 2 PP - WD SATA150 36GB + Hitachi GST 250GB - Plextor PX708A + Sony CRX300A - Dual 600 Watt PSU's.
Forums » E-mail's New War


Saturday, 04-Jul 09:04:51 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9.5 years online! © 1999-2009 dslreports.com.