Index arrow Internet Business arrow Security

E-mail Tracking -The Truth Is Revealed. PDF Print E-mail
Written by Bruno Ligutti   
Have you ever wondered whether your boss, coworkers or family read your e-mails? Well, now you can track your sent e-mails.

In fact, there are many approaches to e-mail tracking. We all know the "read-receipt" system, in which you send an e-mail requesting a read confirmation. When the recipient reads your e-mail, he or she is asked by the software, "Would you like to confirm you received this e-mail?" Then the recipient may choose "No", and we will never get a confirmation. So it is an honor system, and there are some cases in which we cannot trust the recipient.

Other approaches have been implemented by corporate e-mail systems, such as IBM Domino. Recipients are not asked to confirm the reception so confirmations are always sent –provided that the e-mails are actually read-, but it works only for corporate recipients and not for external people.

The tracking system I will describe next is "hands-free" and works for almost every e-mail system. It is analogous to a package-delivery system –we ship a package, and the system gives us a number for keeping track of it. Before getting technical, let me point out that you will need a server –but in case you do not have one, you can always use our already-developed system.

Let’s assume we would like to ask our boss for a rise –that’s a common case in which the recipient cannot be trusted. So the system generates an ID for our e-mail, and stores it in the server’s database. When we send the e-mail, this ID is sent along with it.

What is the idea? Well, the ID identifies our e-mail. When our boss reads it, the ID is "passed" to our server. So the server gets the message, "The e-mail sent to the boss is being read." From there, the server may proceed in many ways, such as storing the date and time, and our boss’ IP address. It can even notify us to our e-mail address and cell phone!

How is the ID "passed" to our server? When our boss reads our e-mail, we just saw that the e-mail needs to "call back" the server with the ID. This is achieved by passing the ID in the source of an image.

Going back to our basic HTML lessons, the image’s src attribute specifies the image’s address. So if we insert an image in our e-mail, and we let its source be ourdomain.com/ourlogo.gif, then our boss’ e-mail client gets that image and shows it to him. That is, the e-mail client "calls" our server at ourdomain.com and requests the image ourlogo.gif.

The trick is to have a special page on our server, which receives the ID, stores the tracked data and notifies the sender, and finally sends back an image –this is achieved by server-side scripting, offered by frameworks such as Microsoft .NET. So we insert a 1x1 hidden image in our e-mail, and let its source be ourdomain.com/ourpage.aspx?ID=0123. ourpage.aspx is our special page, and ID=0123 identifies our e-mail sent to our boss.

The page gets the ID and checks it against the database –recall that the ID is stored in the database. Then it updates the database, and notifies the sender of that particular e-mail. Furthermore, the page can get the recipient’s IP address, which can reveal his or her geographic location and many more details. And finally, the page sends back a 1x1 transparent image, which is shown to the recipient.

This is a "hands-free" system given that the recipient is never asked to confirm the e-mail’s reception –in fact, he or she does not even realize the e-mail is being tracked. Thus, this system has been accused of compromising users’ privacy, and has caused the redesign of e-mail clients and services –which now allow users to disable images on received e-mails.

For seeing this system in practice, please visit the SenderTracer Free Tools at http://www.sendertracer.com.

Bruno Ligutti is the Director of Services and Development of SenderTracer, a recently-launched Internet business offering email tracing.
 


99.jpg

163.jpg

150.jpg

107.jpg

Index arrow Internet Business arrow Security

Results 11 - 20 of 176


Avoiding A New Identity-Theft Scam Author : Stacey Moore
Consumers should be on the lookout for a new type of scam that uses Internet phone services. The scam, known as "vishing," involves criminals using Internet phone services (called VoIP) to trick consumers into revealing information about their bank accounts and credit card numbers over the phone. Here's how it works: A criminal calls you at home or sends an e-mail that asks you to call a local number. In either case, the criminal pretends...

Security is the Number One Issue Online. Author : Terry Ward
It should be a legal requirement for your ISP to protect every surfer, provide spam filtering that actually works and a defence against phishing that is more than a warning letter reminding you that emails asking for passwords should be deleted, but its not. If you surf it is your responsibility to protect your online security. Especially if your connection is a wireless one. You have no more important tasks before attaching yourself to the...

Are ActiveX Controls Safe? Author : A Singh
At the outset of understanding the link between ActiveX Controls and Registry cleaner, let us try to understand what ActiveX actually is and how it is meant to help in the running of the computer. Contrary to the belief of many computer amateurs, ActiveX is not a programming language but sets of rules that guide the way applications run on windows. Notice, we said ‘applications’ not ‘programs’. This is because all programs that run on Windows ope...

Internet Scams | Work At Home Scams Author : ttcinc
It makes no difference if you are thinking about starting a business, shopping or just looking for a new job online, you can protect yourself from some of the cleverest scams online if you just follow the simple steps below. (1) You can always find out information on a company or person by doing a quick search online. Go to Goggle or Yahoo and type in the company or person name and then type in the word scam after. Follow all leads. If no lea...

The Ins and Outs of IPS - Intrusion Prevention System Author : Ariel R
When it comes to protecting your network from attacks a good IPS (intruder prevention system) is needed. Be warned that many intrusion detection systems will try to pass them selves off as an IPS, even when they do not offer all the services of the IPS. Intrusion Detection Systems were the precursors to today’s IPS’s. Often old intrusion detection systems are exploited by attackers because they rely on out of date network technology. IPS is b...

“Phishing” for Suckers: Two Things You Should Look For In An email Author : John Young
Copyright 2006 John Young “For Your Immediate Attention! Don’t Lose Your Account! Update Immediately!” Bob opened the email and was confronted by the logo of one of his major credit card companies. He had been carrying the card for some time, and had used it for a lot of online purchases. Understandably he was concerned with the message under the logo: “Due to online identity theft, we need to verify that the information in your accou...

Spyware- Are you safe online? Author : Dave Jones
Arguably one of the greatest inventions the world has ever known. The internet has opened up the business world; it allows people to communicate across vast distances, cheaper and easier than ever before. There is a world of information at your finger tips. More and more people are getting connected and taking advantage of the great wealth afforded by the net. There are however some fairly serious down sides, identity theft is one of the fastest ...

Computer Viruses, Worms And Trojans Explained Author : Internet Security Squad
Fighting viruses and getting rid of them is big business right now. The first step is knowing just what the enemy is. THE ENEMY - Hackers and Crackers Computer geeks say that there is a difference between hackers and crackers. Crackers do damage to systems they break into while hackers just want to see how everything works. We'll use the more common term of hacker. Originally the term hacker was someone who made furniture with the use of ...

‘Why SSL & 6 In 1?’ Author : 101domainames.com
Why an SSL certificate and 6 in 1? The 6 is six domain names SSL with 1 certificate, like .com, .net, .org, .info and .biz. And ‘Saves’ money! All six in one. The SSL certificate encrypts the information and is a digital certificate that confirms genuineness or truth that the identity of a Web site and what information is sent to the server uses Secure Sockets Layer (SSL) technology. This secure process encrypts by scrambling data into an...

E-mail Tracking -The Truth Is Revealed. Author : Bruno Ligutti
Have you ever wondered whether your boss, coworkers or family read your e-mails? Well, now you can track your sent e-mails. In fact, there are many approaches to e-mail tracking. We all know the "read-receipt" system, in which you send an e-mail requesting a read confirmation. When the recipient reads your e-mail, he or she is asked by the software, "Would you like to confirm you received this e-mail?" Then the recipient may choose "No", and w...

  
Top
 
 
 
© 2008 mmakers.org
Joomla! is Free Software released under the GNU/GPL License.