Full Disclosure: Re: Testing DidTheyReadIt.com

[Thierry Zoller <Thierry () Zoller lu>]

Dear Nick,

Thank you for your insight on this, I think it should be clear to anybody that
if you display just text it should be useless, the stats proof you
wrong though.

- Some poeple like clicking on links even if they are simply
  displayed.
- Some mailing list mirrors do not remove the image thus I get referes
  from www sites (talk about cross mail archive injection..or whatever)
- Some gateways retrieve the image (possibly prior to sending the mail
  to the recipient?) A wonderfull way to find out what GW software
  they use.

> This is an example of a service that, in general, should not work, and
> in future will be increasingly more useless, I think.
Tell this the USCERT, F-SECURE and Microsoft, both registered in the
stats; again a wonderfull proof that theory is far behind real life.

Stats are still coming in from various areas, mostly MAC users though
(no pun intented)

Who is interested in the stats ?

> In the meantime, all (???) those using it should be asking what kind of
> data leakage they are exposing themselves to, through possible message
> content scanning and sender/receiver address usage patterns, among
> others.




-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/