I'm writing an article about blocking DidTheyReadIt web bug spy ware.
I sent my wife a message through their service (free trial, 10 messages at no cost), and if she loads the external images in the email, I get all sorts of interesting information about when, where, how, and for how long she read the message (and it's pretty decent too).
They do this with a web bug 1x1 image. Now I am curious what happens if people all over the world load this image:
http://didtheyreadit.com/index.php/worker?code=844eea38c4f0ab9bd2220f65f4107dbe
I'm figuring that the system must be pretty dumb, and won't figure out that it isn't really here in 200 countries at the same time (although they seem to forget that I could read mail just as easily through a connection in Europe as I can from my home internet connection).
If you load that image, I might get to see the user-agent string of your browser, the referer URL, if any, the best guess at your nearest upstream provider, your IP address as far as the first NAT gateway, when you loaded the image, and the Accept header of your browser. However, because of the hashing, it will look to me like my wife is doing the reading.
So, if you are brave enough, help me screw up their data.
I timed out (Score:2)
Re:I timed out (Score:2)
So, this is even more diabolical than I thought! They are also sucking bandwidth. Imagine a company deciding to use this (the intended market, I'm thinking), and that another company gets a lot of email from them. That is almost a denial-of-service attack! Lots o
Re:I timed out (Score:1)
It is coming across at 1 B/s.
[waiting...]
Turned out to be 302 bytes large.
Re:I timed out (Score:2)
That would be about 5 minutes at 1 B/s, and they claim to measure times much longer than that. How long did it actually take? Did it get slower the longer it went on?
Re:I timed out (Score:1)
I'd almost bet that they eventually count bytes transferred as the method of doing the timing.
We may actually be seeing wget, or some other part of the stack, giving up on the connection... the fact that it was almost exactly 5 minutes is suspect to me.
Anyone think I'll hear from the lawyers? (Score:2)
spammers do this (Score:2)
"Phone Home" for email. I dunno, not sure I would trust a service from
Here's what the report looks like: (Score:2)
The only thing i have changed is the email address at the top, where I inserted "CENSORED".
I'm amazed that it works (Score:2)
Re:I'm amazed that it works (Score:2)