full-disclosure - Re: Testing DidTheyReadIt.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 1 Oct 2007 23:56:18 +0200
From: Thierry Zoller <Thierry@...ler.lu>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Testing DidTheyReadIt.com


Dear Nick,

Thank you for your insight on this, I think it should be clear to anybody that
if you display just text it should be useless, the stats proof you
wrong though.

- Some poeple like clicking on links even if they are simply
  displayed.
- Some mailing list mirrors do not remove the image thus I get referes
  from www sites (talk about cross mail archive injection..or whatever)
- Some gateways retrieve the image (possibly prior to sending the mail
  to the recipient?) A wonderfull way to find out what GW software
  they use.

>This is an example of a service that, in general, should not work, and
>in future will be increasingly more useless, I think.
Tell this the USCERT, F-SECURE and Microsoft, both registered in the
stats; again a wonderfull proof that theory is far behind real life.

Stats are still coming in from various areas, mostly MAC users though
(no pun intented)

Who is interested in the stats ?

>In the meantime, all (???) those using it should be asking what kind of
>data leakage they are exposing themselves to, through possible message
>content scanning and sender/receiver address usage patterns, among
>others.





-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/