RE: readnotify.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----Original Message----
From: Jim Halfpenny [mailto:jim@openanswers.co.uk]
Sent: Wednesday, 25 January, 2006 08:58
To: hfebelingjr@lycos.com
Cc: security-basics@securityfocus.com
Subject: Re: readnotify.com

: : -----BEGIN PGP SIGNED MESSAGE-----
: : Hash: SHA1
: : 
: : Does anyone know anything about a web site called
: : (http://www.readnotify.com/)?  If so does anyone know of anyway to
: : prevent it from sending it's return receipts to the sender?
: : 
: : Herman
: 
: Hi,
: When you use readnotify.com you send your email to
: user@domain.com.readnotify.com and it remails it to use@domain.com. From
: what I remember readnotify.com remail your message and attach a web bug
: i.e. an embedded image link. The image link is on one of their web
servers
: and this is used to identify when an email is read and for how long.
: 
: To foil it you can block loading images in HTML email. I'm not sure if
: this covers the full extent of readnotify.com's tracking. You can get a
: free trial of the service so you could sign up and send yourself some
: messages.
: 
: Regards,
: Jim Halfpenny

Jim,

        What if someone has their client to send E-Mails as only text format, 
and
not HTML?  Does readnotify.com change the format of an E-Mail?

        Would closing the preview pane, and then selecting the MSG, and saving 
it
as a text document defeat their tracking?  I mean if you've closed the
preview pane, and then save the E-Mail as a text document you haven't
opened the E-Mail itself, right?

Herman
Live Long and Prosper
 ___________________          _-_
 \==============_=_/ ____.---'---`---.____
             \_ \    \----._________.----/
               \ \   /  /    `-_-'
           __,--`.`-'..'-_
          /____          ||-
               `--.____,-'

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQ9e+sx/i52nbE9vTEQLmJACg012GXE4M984hnXMsjqUJtPvgBCwAn0ZF
KIzmCgDMC2H4W82kBfjkyKZh
=MpQ/
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------