4 ms·
What on earth makes you think it's anonymous? It's trivial to encode each tracking pixel with a personalized hash of some sort linking it to the intended recip
by danaris 9mo ago
What on earth makes you think it's anonymous?
It's trivial to encode each tracking pixel with a personalized hash of some sort linking it to the intended recipient of that particular email.
This is...just how tracking pixels work.
- crazygringo 9mo agoRight. The hash is anonymous to anyone without access to the internal database of hashes at HSBC. That's how tracking pixels usually work. Sniffing the HTTP connection isn't giving you any way to de-anonymize the recipient. It's a hash, not a long-term identifier.
- danaris 9mo agoBut if they're sniffing your wifi, they can, at the very least, tie it back to your IP address. Along with all the other traffic from your session—which, if you're not using a VPN (in which case they can't get this anyway), is likely to leak enough to provide several more points of identification.
- crazygringo 9mo agoWhich accomplishes what? The hash isn't used for anything else or tied to anything else publicly.
- danaris 9mo agoThey can see that someone opened a tracking pixel from $BANK (or wherever), and, with your other activity, potentially tie that to you.