[Full-disclosure] Testing DidTheyReadIt.com

[Thierry Zoller]

Dear Nick,

Thank you for your insight on this, I think it should be clear to anybody that
if you display just text it should be useless, the stats proof you
wrong though.

- Some poeple like clicking on links even if they are simply
  displayed.
- Some mailing list mirrors do not remove the image thus I get referes
  from www sites (talk about cross mail archive injection..or whatever)
- Some gateways retrieve the image (possibly prior to sending the mail
  to the recipient?) A wonderfull way to find out what GW software
  they use.

>This is an example of a service that, in general, should not work, and
>in future will be increasingly more useless, I think.
Tell this the USCERT, F-SECURE and Microsoft, both registered in the
stats; again a wonderfull proof that theory is far behind real life.

Stats are still coming in from various areas, mostly MAC users though
(no pun intented)

Who is interested in the stats ?

>In the meantime, all (???) those using it should be asking what kind of
>data leakage they are exposing themselves to, through possible message
>content scanning and sender/receiver address usage patterns, among
>others.





-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7