From: Thierry Zoller (ThierryZoller.lu)
Date: Mon Oct 01 2007 - 16:56:18 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Dear Nick,

Thank you for your insight on this, I think it should be clear to anybody that
if you display just text it should be useless, the stats proof you
wrong though.

- Some poeple like clicking on links even if they are simply
  displayed.
- Some mailing list mirrors do not remove the image thus I get referes
  from www sites (talk about cross mail archive injection..or whatever)
- Some gateways retrieve the image (possibly prior to sending the mail
  to the recipient?) A wonderfull way to find out what GW software
  they use.

>This is an example of a service that, in general, should not work, and
>in future will be increasingly more useless, I think.
Tell this the USCERT, F-SECURE and Microsoft, both registered in the
stats; again a wonderfull proof that theory is far behind real life.

Stats are still coming in from various areas, mostly MAC users though
(no pun intented)

Who is interested in the stats ?

>In the meantime, all (???) those using it should be asking what kind of
>data leakage they are exposing themselves to, through possible message
>content scanning and sender/receiver address usage patterns, among
>others.

--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]