Security Basics mailing list archives
RE: www.readnotify.com
From: "Ebeling, Jr., Herman Frederick" <hfebelingjr () lycos com>
Date: Fri, 27 Jan 2006 12:42:48 -0500
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----Original Message---- From: Dan Denton [mailto:ddenton () PAYLESSOFFICE com] Sent: Friday, 27 January, 2006 10:11 To: hfebelingjr () lycos com; Larry Offley Cc: security-basics () securityfocus com Subject: RE: www.readnotify.com : It was my understanding that the overriding issue was not to block the : emails entirely, but to prevent the accessing of the hidden image so as : not to show the email was read. : : I'll concede that you would have to know the addresses of the web : servers providing the image, but since no one has yet provided those, : I'd say the tactic of blocking web access to www.readnotify.com is a good : place to start (or if you happen to look at the HTML source, block : domain name of the target image). : : With the various ways SPAMMERs use to spoof the source of an email, I : think it would be more difficult to rely solely on the blocking of the : email to solve your problem. : Dan, This is true, but if what others have said about them using URLs to redirect one to where they can read E-Mail sent to 'em. That sounds like a LOT of "work" to block www.readnotify.com tricks, i.e. webbugs, iFrames, and .WAV files. This is true, but I think that it's safe to say that we don't want to "block" their E-Mails per se, but to as you've said in yer first paragraph just block their tracking methods. Herman Live Long and Prosper ___________________ _-_ \==============_=_/ ____.---'---`---.____ \_ \ \----._________.----/ \ \ / / `-_-' __,--`.`-'..'-_ /____ ||- `--.____,-' -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.3 - not licensed for commercial use: www.pgp.com iQA/AwUBQ9pWkh/i52nbE9vTEQLZVwCgnLeF96b0bLV/RJs3MgRRJ1/YLFMAoK7C J4h7S+0R4Pj12HYR8ze6/7vQ =cau5 -----END PGP SIGNATURE----- --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- RE: www.readnotify.com Dan Denton (Jan 27)
- RE: www.readnotify.com Ebeling, Jr., Herman Frederick (Jan 27)