Your SlideShare is downloading. ×
Web bugs prez
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×

Introducing the official SlideShare app

Stunning, full-screen experience for iPhone and Android

Text the download link to your phone

Standard text messaging rates apply

Web bugs prez

308
views

Published on


0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
308
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
7
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. THE LIFE OF A WEB BUG
  • 2. TODAYS AGENDA• WHAT IS A WEB BUG ?• HOW THEY WORK• USES OF WEB BUGS• EMAIL WEB BUGS• HOW THEY WORK• WHEN GOOD BUGS GO BAD• EMAIL WIRETAPPING• I BET YOU DIDN’T KNOW…• RULES OF ENGAGEMENT• THE FUTURE IS ‘P3P’
  • 3. WHAT IS A WEB BUG ?PR A F IV CY OUNDAIONDE INIT T F ION AW bug is agr phic on aW pa orin a E ilmessa t tis designed t monit w is r ding t W pa orE ilmessa W bugs ae oft inv e eb a eb ge n ma ge ha o or ho ea he eb ge ma ge. eb r en isibl beca t ae typical onl 1- 1 pixelin size. T ae r esent a HT LIM t gs. use hey r ly y by- hey r epr ed s M G aDOUBL CL DE INIT E ICK F ION “Acl rG [Ga Int cha F ma] orpixelt g [aso know a aw bea is al ofcode t tcompa pl ce on t w sit w al s us t hel t ea IF r phics er nge or t a l n s eb con] ine ha nies a heir eb es hich low o p hem a l t a erising ca igns a t gener lusa pat ns ofv or t t w sit nayze heir dv t mpa nd he a ge ter isit s o heir eb es”W R T YDIF E HE E HE F R“… Cl rG s a pixelt gs ae somet eroneousl cal w bugs. W e cl rG s a pixelt gs do notca a da ge t yourcomput , w bugs, oft witen in … ea IF nd a r imes r y led eb hil ea IF nd a use ny ma o er eb en r t J v Scr , cont in execut bl fil a ma ca ham t yoursoft ae orcomput ” a a ipt a a e es, nd y use r o wr erW BUG HY ? ”T w d "bug" is being used t denot asmal ea esdr he or o e l, v opping device” Sour htp:/w w iv cyfoundaion.or ce: t / w .Pr a t g
  • 4. HOW THEY WORKTHIS IS A DOUBLECLICK ( sic) ‘ WEB BUG’ht /d.doubl ick.neta iv c= 4 4 ;t pgv ;ca= x15pr d= "+ or tp:/a ecl /ct ity;sr 68 13 ype= w t od;or d;document r n(< img sr " + spotighta + ? W H= 1 HE HT 1 BOR R 0 ); .witel c= l t g " IDT IG = DE = >ht / w .t yshop.com/ tp:/w w heflWHAT THEY LIKE TO EATW aw pa is l ded t t g is a iv t a itr ds t cookie fil in t br sera pa ba t it ser ert folow infor t hen eb ge oa he a ct aed nd ea he e he ow nd sses ck o s v he l ing maion:• IPa ess oft comput t tfet t W bug ddr he er ha ched he eb• UR oft pa t tt W bug is l t on L he ge ha he eb ocaed• UR oft W bug ima L he eb ge• T t w bug w s v ed ime he eb a iew• T ofbr sert tfet t W bug ima ype ow ha ched he eb ge• Apr iousl setcookie v l ev y aue
  • 5. US ES OF WEB BUGS• A net or ca use W bugs t a infor t t aper lpr e ofw tsit aper is v ing. T per lpr e is ident byt d w ks n eb o dd maion o sona ofil ha es son isit he sona ofil ified he br sercookie ofa a net or A some l t t t per lpr e w is st ed in adaaba ser erbel ow n d w k. t aer ime, his sona ofil hich or t se v ongingt t a net or o he d w k, det mines w tba a one is show er ha nner d n.• A heruse ofW bugs is t pr ide a independenta not eb o ov n ccount ofhowma peopl ha e v ed apat a W sit ing ny e v isit ricul r eb e.• W bugs ae aso used t gaherst t ics a W br serusa a differ pl ces on t Int net eb r l o t aist bout eb ow ge t ent a he er .• BUGNOSIS
  • 6. WEB BUGS IN EMAIL MES S AGES• Aw bug ca be used t find outifapat a ema messa ha been r d bysomeone a ifso, w the messa w s r d. eb n o ricul r il ge s ea nd hen ge a ea• AW bug ca pr ide t IPa ess oft r eb n ov he ddr he ecipientift r he ecipientis at ing t r in a tempt o ema nonymous.• W hin a or nizaion, a w bug ca giv a ideahowoft amessa is being for aded a r d. it n ga t eb n e n en ge w r nd ea• T mea e howma peopl ha e v ed t sa ema messa in amaket ca ign. o sur ny e v iew he me il ge r ing mpa• T det ifsomeone ha v ed aj ema messa ornot Peopl w do notv amessa ae r o ect s iew unk il ge . e ho iew ge r emoved fr t l forfut e ma ings. om he ist ur il• T synchr aW br sercookie t apat a ema a ess. T t ick al s aW sit t knowt ident yofpeopl w come t t sit a al t dae. o onize eb ow o ricul r il ddr his r low eb e o he it e ho o he e t aer t
  • 7. UP CLOS EEXAMPLE OF AN EMAIL WEB BUG• E ilW bugs ae r esent a 1- 1 pixelIM t gs j l W bugs forW pa How er beca t senderoft messa ar dy ma eb r epr ed s by- G a ust ike eb eb ges. ev , use he he ge l ea know yourE ila ess, t aso incl t E ila ess in t W bug UR . T E ila ess ca be in pl in t orencr ed. s ma ddr hey l ude he ma ddr he eb L he ma ddr n a ext ypt< imgw h= 1 height 1 sr "htt / w .m0 / l idt = c= p:/w w .netm/ogopen0 sp? id= 3 t 3 153 3 2.a v &caid= 70 0 7&ema = SM HS%4 t c.net at= " "> il IT 0ia " lEMAIL VENDORS KNOWN TO US E WEB BUGS• E ct xa is• Digit lImpa a ct• Responsys
  • 8. EMAIL WIRETAPPING T expl al s someone t sur ept iousl monit witen messa at ched t for aded messa Some oft possibl w ys t tt expl might his oit low o r it y or r t ges ta o w r ges. he e a ha his oit be used incl ude: M or t pah ofaconfident le- ilmessa a witen comment at ched. onit ing he t ia ma ge nd r t s ta In abusiness negot t conduct v e- il one side ca l r inside infor t fr t ot side a t pr lis discussed t ough t iaion ed ia ma , n ean maion om he her s he oposa hr he recipientcompa int na e- ilsyst nys er l ma em. Abugged e- ilmessa coul ca ur t nds ofe- ila esses a t for aded messa is sentaound t w l ma ge d pt e housa ma ddr s he w r ge r he ord. Commer lent ies, pat al t ba offshor ma seek t offere- ilw et ppinga aser ice. cia it ricul ry hose sed e, y o ma ir a s v
  • 9. S EGWAY TO VAGUELY RELATED TOPIC• Commercial surveillance- DONE• Unscrupulous surveillance- DONE• Workplace surveillance-NOT DONE
  • 10.   I BET YOU DIDN’T KNOW…"M e t n t ee- rer ofmaorU.S. fir ( 77.7 percent) r d a r iewempl communicaions a a iv ies on t j incl or ha hr quat s j ms ecor nd ev oyee t nd ct it he ob, uding phone cal e- il Int netconnect a comput fil ls, ma , er ions, nd er es." Sour A ica M na ce: mer n a gementA t (A A sur eyof"W kpl ce M or &Sur l nce 20 1” ssociaion M ) v or a onit ing veila 0   But during the 9-5 workday…• 70 ofalInt netpor a t a occur (sour SexTa ). % l er nogr phy r ffic s ce: r cker• 3 t 4 % ofInt netsur is notbusiness- el t (sour IDC). 0o 0 er fing r aed ce:• M e t n 60 ofonl pur ses ae ma (sour Niel / R t or ha % ine cha r de ce: sen/Net aings).  
  • 11. THE RULES OF ENGAGEMENTEMPLOYERS ARE NOT REQUIRED BY LAW TO DIS CLOS E:• T fr he equencyoft monit ing. he or• T infor t t be monit ed. he maion o or• Howt infor t w lbe st ed used a discl in t fut e. he maion il or nd osed he ur• T l wpl ces no l aion on howempl s use t fr s oft sur l nce, he a a imit t oyer he uit heir veila• E oyees ha e no r t r iewst ed e- ila W v s. mpl v ight o ev or ma nd eb isit• Ifempl s choose t ignor t l wa notinfor empl oyer o e he a nd m oyees oft monit ing, t mostsev e penat forafir offenderis a a he or he er ly st n dminist aiv penat of$50 ; r t e ly 0  THEM AND US“E oyer w d be w la ised t discl t empl mpl s oul el dv o ose o oyees w tis being monit ed a w E oyees, mea hil shoul ma itt business t l r w monit ing ha or nd hy. mpl nw e, d ke heir o ean hich or syst ae in pl ce, a w tt ca bil ies ae” ems r a nd ha he pa it rSour htp:/w w iv cyfoundaion.com ce: t / w .Pr a t
  • 12. THE FUTURE IS ‘P3P’• T Pl t m forPr a Pr ences Pr ect(P3 s cr t setofcr er forsit t tsetcookies on user T d pat cookies w h pol w lbe ev l t byt he afor iv cy efer oj P),ha eaed it ia es ha s. hir ry it icies il auaed he user br sert det mine w hert meetuserpr ences, a hence be a ed. s ow o er het hey efer nd ccept• P3Ps Full Policy and Compact Policy: A"F l P3 pol is adet il XM documentt tcompl el descr aldaacolect pr ct forasit In a ion t F lPol sit ae a e t communicae t ul" P icy a ed L ha et y ibes l t l ion a ices e. ddit o ul icies, es r bl o t heir pol w h r r t onl cookie daat ough amecha cal aCompa Pol ACompa Pol is acust HT Phea t tis senta t t acookie is set T icies it egad o y t hr nism led ct icy. ct icy om T der ha t he ime . he Compa Pol CP, uses asequence ofa oximael 52 t ct icy, ppr t y okens t summaize asit pol w h r r t t tcookie. Ow t CPs condensed naur t ae fa ea o r es icy it egad o ha ing o t e hey r r sier forW Br ser t int pr a ma decisions upon tha ae F lPol eb ow s o er et nd ke n r ul icies.• Int netE or 6.0 w lr e t d pat t tsetcookies t del p3 "compa cookie pol er xpl er il equir hir ries ha o iver p ct icies" w h t cookies. T d pat cookies t tdo notha e pol it heir hir ry ha v icies w lbe bl il ocked.