If you have control over a webserver, send the friend a link to an invalid image on that webserver and tell them to click on it.  Once they've clicked the link check your server logs for that invalid image and you should have their IP address (unless they're using a proxy like mentioned before).  You can also do this with an email if your "victim's" email client is configured to automatically render images when an email is opened.  This technique has been referred to as a "web bug".
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Reply via email to