Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: steve86
How would it tell the difference between a user opening the message and, say, a spam filter like SpamAssassin doing it?

Because a spam filter would probably not actually fetch the image. The only reason for a spam filter to fetch an image would be to OCR it and decide if it contained spammy text. I haven't heard of any spam filters that are that advanced.

The usual trick is to embed a 1x1 transparent image in the email with a URL that uniquely identifies the individual email. If the recipient opens the email with images enabled, his email client will request the image from the server, thus revealing that the recipient has viewed the email and from what IP address (giving a clue as to the recipient's location). If the recipient forwards the email, the image will again be fetched as each forwardee opens the email with image display enabled.

One refinement is to refuse to serve the image when requested and note how long it takes the TCP/IP connection to drop. This will give a clue as to how long the recipient viewed the email. If the recipient blows past the email, the connection will drop right away. But if the user lingers on the email, then the connection will remain open until it times out some time later.

60 posted on 02/12/2014 8:01:00 PM PST by cynwoody
[ Post Reply | Private Reply | To 29 | View Replies ]


To: cynwoody
The usual trick is to embed a 1x1 transparent image in the email with a URL that uniquely identifies the individual email

It should be possible to screen for emails with these embedded tracking links, based on the image server's URL in the links. Someone should compile a list of these URLs, as well as senders, and then distribute them similar to Adblock filter subscriptions. I personally don't want to see any emails of this sort, unless I've whitelisted them. This filtering functionality could be incorporated into Spamassassin et. al. And regarding personal "return-receipt" type functionality embedded like in the article, I don't want to see them either. Emails from boss? No, problem, I don't have a boss.

Regarding exposure of your IP address when opening any remote image, that really is a problem. It strongly argues for going through a proxy of some kind or functionality like gmail has (although then you get all the Goggle tracking).

62 posted on 02/12/2014 8:49:11 PM PST by steve86 (Some things aren't really true but you wouldn't be half surprised if they were.)
[ Post Reply | Private Reply | To 60 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson