Who's watching your *.docs ?

[socalgal]

http://www.infowar.com/

On the left menu, scroll to InfoSec.Com/Internet Security/2000 - Some Microsoft Documents May Be Web Bugged

Hmmmm...

[Brangwen]

Very interesting. I've never seen the infowar site before. The embedded "bugs" are revealing, with endless possibilities and an insight into the future applications generated by the use of computer technology in many areas of everyday activities ...

Brangwen http://sysopt.earthweb.com/forum/wink.gif

[OuTpaTienT]

Is that really a bug....or an intentionally implemented "feature" by MS?

----
btw, I didn't find it so easy to navigate to that document...so here's a direct link:
http://www.info-sec.com/internet/00/internet_083100a_j.shtml


Thanks for keeping us aware socalgal.

[socalgal]

Yes, infowar is a very interesting site and it's kept current too.

Thanks for the direct link, OuT~

Here's some info on finding a web bug:


What exactly is a Web Bug?

A Web Bug is a graphics on a Web page or in an Email message that is designed to monitor who is reading the Web page or Email message. Web Bugs are often invisible because they are typically only 1-by-1 pixel in size. They are represented as HTML IMG tags. For example, here are two Web Bugs recently found on Quicken's home page (www.quicken.com):


<img src="http://ad.doubleclick.net/ad/pixel.quicken/NEW" width=1 height=1 border=0>

<IMG WIDTH=1 HEIGHT=1 border=0 SRC="http://media.preferences.com/ping?ML_SD=IntuitTE_Intuit_1x1_RunOfSite_A ny&db_afcr=4B31-C2FB-10E2C&event=reghome&group=register&time=1999.10.27.20.5 6.37">

The two Web Bugs were placed on the home page by Quicken to provide "hit" information about visitors to DoubleClick and MatchLogic (AKA, preferences.com), two Internet advertising companies.

And, in email:

What do Web Bugs in Email messages look lile?
Email Web Bugs are represented as 1-by-1 pixel IMG tags just like Web Bugs for Web pages. However, because the sender of the message already knows your Email address, they also include the Email address in the Web Bug URL. The Email address can be in plain text or encrypted. For example, here are two Web Bugs sent to me in junk Email messages:


<img width='1' height='1' src="http://www.m0.net/m/logopen02.asp? vid=3&catid=370153037&email=SMITHS%40tiac.net" alt=" ">

<IMG SRC="http://email.bn.com/cgi-bin/flosensing?x=ABYoAEhouX">


From http://www.tiac.net/users/smiths/privacy/wbfaq.htm


[This message has been edited by socalgal (edited 09-04-2000).]

[Bryan55]

MS simple didn't understand the impact of such a high level of integration & now it is just to easy to 'infect' a huge percentage of the world's computers. It is an unintended invitation to any rowdy to cause trouble. MS should of made its programs check the source of new scripts & erase all from unknown creators. MS could done itself & us a big favor by thinking of Windows as the foundation utility & not worrying about buyers using other vendors' programs. No one thinks of not using electricity, & had MS paid more attention to making Windows that basic & stable it'd be at the focus of much less debate than it is today, with fewer security warnings www.zdnet.com/zdnn/stories/news/0,4586,2623456,00.html (http://www.zdnet.com/zdnn/stories/news/0,4586,2623456,00.html)
Besides being terrific programs, then, Opera & Eudora give a bit of safety by being different, diversity is healthy

[Wiruz]

Why won't they just leave us alone? Why do we need to be monitored?

I don't know who's watching who anymore...

-Wiruz