
For the last four years, the aptly-named Electronic Frontier Foundation has been pioneering privacy issues in cyberspace. They are of some interest to us now, with an IT Bill on the anvil. The following is an advisory on how the Web-enabled mail you read can be used by corporates to see precisely where you go on the Internet:
Privacy and consumer groups and a leading security expert have asked the Federal Trade Commission to require software makers to close a technical loophole in many popular e-mail systems that allows senders of bulk commercial e-mail to track the surfing behavior of people who merely read the e-mail.
Many e-mail readers display e-mail messages using a Web browser. If the message contains graphics retrieved from the web when the mail is opened, the loophole allows the recipient to be assigned a unique serial number in a cookie8217;, which will later be silently transmitted as the recipient surfs the Web. Many companies encode the recipient8217;s e-mail address in the URL web address of the graphic, so that their servers can match the cookie to the e-mail address.
Jason Catlett, President of Junkbusters Corp. said, 8220;Cookie leaks are the bug from spammers that keeps on bugging. It8217;s intolerable that e-mail can be used to silently zap a nametag on to you that might be scanned by a site you visit later. It8217;s like secretly barcoding people with invisible ink.8221;At the FTC8217;s hearings on online profiling last month, privacy groups called for an immediate halt to the practice. Andrew Shen, Policy Analyst at the Electronic Privacy Information Center EPIC said that 8220;The lack of government action continues to place the average user unaware of the tracking and surveillance technologies at work at the mercy of companies that often abuse their privacy.8221;
Excerpted from the archives of the Electronic Frontier Foundation eff.org