« Is the blog world audience interesting to you? | Main | Spamnet riddle solved »

I took one for the team (DidTheyReadIt = NiceTryDorks)

So a friend alerted me to this new service. It's called "Did They Read It" and it's a service that claims to be able to tell you if someone reads email you send them. (story)

First of all... on it's face, I have trouble with it. Sure there can be legit uses for it. But this idea of "secretly" spying on the person you send email to in order to see if/when they opened it smacks of an invasion of privacy and I just don't like it. I guess it's the "secretly" part that bugs me. What if there were a way for me to leave you a voice mail, and then secretly know when you listened to it? Without your knowledge? Does that make you uncomfortable? It does me.

Anyway... so upon learning about this, my first reaction (after not liking the idea) was to call hogwash on the whole deal. I'm very familiar with how email works and I am quite certain there's only 1 way for this to work. And it's a crummy solution that isn't reliable. But I had to test it. I had to take one for the team!

And so I did. I signed up for a free account and fired it up. Sure enough, it works exactly like I thought it would, and ultimately, it isn't reliable, and is growing increasingly less reliable all the time.

Here's why
It works like this: You send an email. It goes through the didtheyreadit.com server, they append an invisible image to the email you are sending, and then they send it on to the recipient pretending to be you. When the recipient opens the email, this image loads and sends a signal back to didtheyreadit, and they can then track that you've opened it. Simple enough.

Here's are the problems with it:
1) It only works if the recipients load images in their email program. Anyone using the newest version of Microsoft Outlook (read: millions) doesn't allow images to load in emails for precisely this reason! It's an invasion of privacy, and by default, no users of Outlook will load this image, and so the reporting will never happen. The adoption of this style of handling email is growing rapidly every day. Additionally, many folks read email in text-only format. This doesn't allow images to load, and so they'll never be detected either.

2) Spam filters are growing increasingly astute at blocking spam. One of the methods they employ is to do what is called a "reverse DNS lookup." In non-nerd speak, it means they check to see if the origin of the email matches the email address. Well the email is actually coming from the didtheyreadit servers and it says it is coming from you. Those 2 don't match, so many spam filters will dump this message. In fact, the 1 test message I sent went straight to the junkmail folder when it arrived. Cute.

So, the moral of the story? First: don't bother trying to spy on people's email reading habits. Second: this tool doesn't work.

And seriously, if this gains any traction, you can be sure that a cottage industry around subverting this will spring up over night. Just don't bother.

If you want to protect yourself against this, and you don't use the newest version of Outlook, just set your email program not to display images. (This will save you from those other icky spams with images too.)

Comments

I think this is a major privacy issue on a number of fronts. There are plenty of "checks" on email receipt currently available (notably the "ask user to send confirmation" in nearly all standalone email clients).

The real privacy issue in my mind is with the SENDERS, not the recipients. If you knew that someone had a copy of all of your emails as an image and not mere text on their server, and their entire corporate message was fooling people without their knowledge, how safe would you feel about that? It's like a wolf running the henhouse.

If your product is privacy, everything should be private. If your product is confirmation, your product should be clear and open. It's like popup ads and spam. If you're giving me crappy ads and sharing my email and all of those other icky things, how can I trust you with my credit card number and business? Answer: I can't.

In legal circles, Washington and a number of states are starting to allow service and legal documents to take place over email and the web. It is basically an opt in kind of system, which is the only way to develop a proper confirmation system. If you want the benefits of email service, you have to agree to abide by a number of rules (no spam, follow deadlines, proper format, etc.) and can only be done if both partie agree. This is open and honest; you want to be sure that somebody got your email, how about a legal agreement that they'll give you a good address and send you a proper confirmation and follow some good rules. Biz should follow that model too.

There is a small utility out now that stops didtheyreadit. - http://www.wizard-industries.com

No need for a "Utility", just add the following to your "HOSTS" file:

127.0.0.1 didtheyreadit.com

Save and you're done.

G

Amen brother! This thing is a joke... not to mention their plugin crashes each time I open Outlook!

didtheyreadit slowed my puter to a crawl.apparently they do not delete message logs hence the slowness etc.
they alibi their product & when you catch them out, refuse to have any more to do with you.

Post a comment

Comments are moderated, and will not appear on this weblog until the author has approved them.