RE: Email webbugs

From: Dom De Vitto (Domat_private)
Date: Tue Aug 28 2001 - 01:42:21 PDT

  • Next message: Gilbert Alaverdian: "Buffer Overflow document repository"

    Webbugs are NOT return receipts!!
    Everybody should *at least* have return-receipts set to 'prompt'.
    That is a no-brainer.
    Web bugs are totally different, and can divulg a lot more information -
    especially when tallied with cross-host information.
    
    Dom
    -----Original Message-----
    From: Peter Pekala [mailto:peterpat_private]
    Sent: 27 August 2001 17:11
    To: abuse; Focus-MS
    Cc: VULN-DEV@SECURITYFOCUS. COM; BUGTRAQ@SECURITYFOCUS. COM;
    win2ksecadviceat_private
    Subject: Re: Email webbugs
    
    
    In Outlook Express - Have you tried configuring this through Tools -
    Options - Receipts - Returning Read Receipts ?
    
    - Peter
    
    
    : One of the things that has always bothered me about Outlook Express and
    : Outlook is that they are susceptable to webbugs. Basically there are no
    : options to block confirmation of your reading an email so any spammer can
    : verify that your address is active as long as they can get you to just
    view
    : an email.
    :
    : A lot of people have difficulty understanding exactly what this means so I
    : set up a demonstration page at http://www.nthelp.com/OEtest/oe.htm in an
    : attempt to raise awareness of this nonsense and get MS to do something
    about
    : it. I don't know if other email programs like Eudora and Netscape are
    : vulnerable to email webbugs so if anyone tests those please let me know
    the
    : results.
    :
    : Anyway, I've made the test site available to the public now so if you want
    : to check your email reader, feel free.
    :
    : Geo.
    :
    



    This archive was generated by hypermail 2b30 : Tue Aug 28 2001 - 09:25:11 PDT