The IAB loves tracking users. But it hates users tracking them.


Logo of the IAB tech lab.

The Interactive Advertising Bureau (IAB) is a standards development group for the advertising industry. Their members love tracking users. They want to know where you are, who you're with, what you're buying, and what you think. All so they can convince you to spend slightly more on toothpaste. Or change your political opinions. Either way, […]

Continue reading →

if ( gender == "female" && married == True && age >=30 ) { hasChildren = True; }


Email promting parents to get their kids travel savvy.

Marketing really is crap. Recently, SE Railways sent this piece of email drivel to my wife: We don't have any kids, thankfully - and are not having any in the future. My wife was literally recovering from a sterilisation procedure when the email arrived. So it seemed a bit weird that they'd send her a […]

Continue reading →

GDPR and common sense


Some giant question marks standing in a field. Photo by https://www.flickr.com/photos/dbrekke/181939582/

Every so often, I get a glimpse into the thought processes of someone who has a very different view of the world to me. I don't deal with people's personal information often. So I was surprised to receive an email with a multi-megabyte spreadsheet called "Pay and Bonuses 2020". The email contained this doozy of […]

Continue reading →

Stop adding email tracking links to phone numbers!


Gmail showing the tel URl scheme of a link with extra tracking information in it.

My Chinese takeaway delivery was late. Very late. I flipped open the confirmation email sent by Just-Eat to double-check I had all the details correct. At the bottom was a "click to call" link. Hurrah! I clicked dial, and this is what filled my screen: An absurdly long phone number. Bemused, I went to inspect […]

Continue reading →

How should couples handle joint email addresses?


Terence and Liz in front of Lasers at emfcamp.

For years, my email address was registered with our electricity supplier. I got the monthly bills sent to me. My wife's email was used for the water supplier. This made sense when we were a young couple with separate finances - but now we're a smug an old married couple, with a joint bank account, […]

Continue reading →

How to rescue blocked files from Gmail


Show Original option in Gmail.

Six years ago, I developed Android apps (APKs) which I emailed to myself. When I try to download them from Gmail today, I get this rather annoying error. Anti-virus warning – 1 attachment contains a virus or blocked file. Downloading this attachment is disabled. Google, in its efforts to protect me from myself, have retroactively […]

Continue reading →

Is LogMeIn leaking email addresses?


Fraud alert warning signs.

Like all security minded people, I use a unique email address for every service I sign up to. This week, I noticed I had started receiving spam to an email address associated with my Join.me account. Join.me is a screen sharing service now owned by LogMeIn. I signed up for a trial of Join.me back […]

Continue reading →

102KB ought to be enough for any email


Raw HTML in the middle of an email.

Another day, another Gmail bug which won't get fixed. The original Android phone - HTC Dream - had 192MB of RAM. The latest Android phones tend to have 6GB. A 32 times increase in a decade. Laptops have also leapt forwards in speed and memory. Sadly, no one on the Gmail team has noticed. It's […]

Continue reading →

€100 Bug Bounty from Intigriti - please stop tracking your confirmation emails!


Weird confrimation address.

There's a new bug bounty provider in town! The Belgian company Intigriti. This is a quick write-up of how I found a trivial bug in their own system. The EU has announced that it is providing funding for bug bounties on critical open source projects. They've split the programme between HackerOne and Intigriti. I signed […]

Continue reading →

MailChimp leaks your email address


Change email address page with obscured email address

An annoying privacy violation from leading email newsletter company MailChimp. Responsibly disclosed on 2017-12-04. When you click a link on a webpage or an email, your browser opens up that link and sends the newly visited webpage a Referer Header. (The misspelling is a historical artefact.) This says "Hello new site, I was referred here […]

Continue reading →