On Mon, 2002-04-29 at 14:31, Laurence Brockman wrote:
> Why don't you send an email message to your yahoo account with some embedded
> html (or JavaScript?) in it (Such as a pic on your home server or

> Not sure if this would work, but it might be worth a shot.... anyone with
> more experience with HTML email stuff think this would work?

Yes, this may work.  Its called a web bug [1].  Web bugs are graphical
elements in HTML (web pages, HTML email, HTML usenet message, etc)
designed to monitor the reader of that message.  They can be something
as obvious as a banner or as hidden as a 1x1 pixel transparent GIF. 
Often the URL is encoded in a manner that identifies the reader and can
also be used to place identifying cookies.

This is one of the problems with HTML email.  Spammers will use web bugs
to identify email addresses where the reader has actually looked at the
message.  And on occasion they will set a cookie to reference the spam
when / if the reader later visits the site being advertised.  Ximian's
Evolution email client handles this by allowing the user to decide if
they wish to load images in the HTML email after having read the text.

One person reported that their resume on monster.com contained small
images of their certifications which were actually web bugs.  He could
search his web server's log for information on when his resume was being
viewed and perhapse by which companies.  There has also been some
discussion over the integration of the browser and Microsoft Office and
the possibility of, say, embedding a web bug in a Word document.


[1] http://www.privacyfoundation.org/resources/webbug.asp

-- 

.: Paul Hosking . [EMAIL PROTECTED]
.: InfoSec      . 408.829.9402

.: PGP KeyID: 0x42F93AE9
.: 7B86 4F79 E496 2775 7945  FA81 8D94 196D 42F9 3AE9

Reply via email to