1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Does P@ypal track you when opening emails from them?

Discussion in 'Ebay' started by mraz, Sep 26, 2012.

  1. mraz

    mraz Registered Member

    Joined:
    Aug 10, 2008
    Messages:
    51
    Likes Received:
    1
    Does P@ypal track you when opening emails from them and potentially getting linked between accounts?

    I did some digging and there is a cookie installed on your computer when you open an email from P@ypal, and the cookie is from 2o7.net. The question is, can P@ypal track you this way and potentially get linked between accounts?

    Thanks.
     
  2. futurestunner

    futurestunner BANNED BANNED

    Joined:
    Dec 26, 2009
    Messages:
    1,532
    Likes Received:
    1,036
    i'm curious too, can anyone answer this?
     
  3. aakon7

    aakon7 Regular Member

    Joined:
    May 15, 2010
    Messages:
    489
    Likes Received:
    249
    Occupation:
    eCommerce consultant
    Location:
    Tennessee
    Yes, they track when you read them and log all info, Paypal tracks your every move cause they want to cut down on fraud so they have to log everything they possibly can. It is well known that they track your emails and all data associated with it.
     
    • Thanks Thanks x 1
  4. SmartMan

    SmartMan BANNED BANNED

    Joined:
    Jul 25, 2012
    Messages:
    673
    Likes Received:
    1,244
    After looking at this info on 2o7.net, I believe Paypal is tracking user info via cookies. With the tracked info they can easily find out user's location,whether they logged into any other Paypal account or not,etc..,
     
    • Thanks Thanks x 1
  5. Narrator

    Narrator Power Member

    Joined:
    Oct 5, 2010
    Messages:
    507
    Likes Received:
    396
    Occupation:
    Internet Marketing
    Location:
    /dev/null
    Disable images in your emails and it wont be able to track the emails.
     
    • Thanks Thanks x 4
  6. EmpireQuality

    EmpireQuality Elite Member

    Joined:
    Jan 18, 2010
    Messages:
    1,903
    Likes Received:
    383
    are you sure about that?
    because paypal definitely has some of the best tracking methods on the internet, they "caught" me red handed.
    but yes, they track your emails for sure. they don't mess around anymore.
    stay away from paypal as much as possible my friends.
    it is much too risky to do business with them.
    but i know that there is not much you can do about that when selling on ebay....
    since ebay owns paypal.
    so of course they are going to use their own company lol
     
  7. dariobl

    dariobl BANNED BANNED

    Joined:
    Jul 11, 2012
    Messages:
    379
    Likes Received:
    500
    Email tracking is done via images, each email which have tracking feature, have small 1x1 px image which is logging when someone open the email, there is no other way of tracking.
     
    • Thanks Thanks x 1
  8. GreenGoblin

    GreenGoblin BANNED BANNED

    Joined:
    Jul 17, 2008
    Messages:
    1,493
    Likes Received:
    2,564
    This is correct unless there doing something new nowadays but this is a correct statement
     
  9. MichaelW

    MichaelW Registered Member

    Joined:
    Sep 23, 2012
    Messages:
    62
    Likes Received:
    7
    Yes, that is what I do all the time. Never have any problem with it
     
  10. phatzilla

    phatzilla Supreme Member

    Joined:
    Apr 9, 2009
    Messages:
    1,366
    Likes Received:
    1,017
    If you use a mail manager, such as thunderbird, then the only real thing they can track from that is what IP made the request to download the image as you're not opening it in a browser.

    anyway gmail automatically disables images unless you specifically enable em.
     
    Last edited: Sep 26, 2012
  11. MichaelW

    MichaelW Registered Member

    Joined:
    Sep 23, 2012
    Messages:
    62
    Likes Received:
    7
    With Outlook and Thunderbird, the image loading is disable by default
     
  12. Aaric

    Aaric Elite Member

    Joined:
    Mar 7, 2010
    Messages:
    1,576
    Likes Received:
    1,121
    Gender:
    Male
    Location:
    USA
    2o7.net

    It does track everything

    Block this website in your host file
     
  13. cjmixers

    cjmixers Junior Member

    Joined:
    Jan 18, 2011
    Messages:
    119
    Likes Received:
    49
    Location:
    On a planet
    yes they can and yes they do. It is highly recommended that you use Gmail, since it automatically blocks images and cookies.
     
  14. cm00x

    cm00x Newbie

    Joined:
    Aug 26, 2012
    Messages:
    35
    Likes Received:
    20
    I wander if there is any flash cookies method to track on emails
     
  15. kanyboy

    kanyboy Newbie

    Joined:
    Sep 26, 2012
    Messages:
    3
    Likes Received:
    0
    paypal are really scammmmmmmm
     
  16. kanyboy

    kanyboy Newbie

    Joined:
    Sep 26, 2012
    Messages:
    3
    Likes Received:
    0
    they f... keep your private info for many many years after you close your acount (not legal)
     
  17. istart

    istart Junior Member

    Joined:
    Oct 10, 2011
    Messages:
    116
    Likes Received:
    26
    Occupation:
    Web developer - apps and db.
    Location:
    Canada
    OK, I was going to shoot off some know it all info about how email tracking works and what data paypal can glean from you reading their maill, but I thought let's give it a test and find out what they really can see from an email.

    So first off, email tracking is done with php, asp or other server side scripts disguised as images. They use images because this is really the only type of external file you can load in most email clients. Any other file will provide the same resluts.

    I wrote a quick tracking script in php and sent myself an email through it to my gmail acct. It did not track anything on me until I clicked on display images. When I clicked here's the data that I was able to get:


    Code:
    SERVER:
    HTTP_HOST=localhost
    HTTP_CONNECTION=keep-alive
    HTTP_USER_AGENT=Mozilla%2F5.0+%28Windows+NT+5.1%29+AppleWebKit%2F537.1+%28KHTML%2C+like+Gecko%29+Chrome%2F21.0.1180.89+Safari%2F537.1
    HTTP_ACCEPT=%2A%2F%2A
    HTTP_ACCEPT_ENCODING=gzip%2Cdeflate%2Csdch
    HTTP_ACCEPT_LANGUAGE=en-US%2Cen%3Bq%3D0.8
    HTTP_ACCEPT_CHARSET=ISO-8859-1%2Cutf-8%3Bq%3D0.7%2C%2A%3Bq%3D0.3
    HTTP_COOKIE=emailtest%3DThis%2Bis%2Bsome%2Btest%2Bdata%3B+emailtest2%3DSome%2Bmore%2Bcookie%2Bdata%3B+deviceorder%3D01234567%3B+device%3D6%3B+network_type%3D0
    PATH=C%3A%5CWINDOWS%5Csystem32%3BC%3A%5CWINDOWS%3BC%3A%5CWINDOWS%5CSystem32%5CWbem%3BC%3A%5CProgram+Files%5CQuickTime%5CQTSystem%5C%3BC%3A%5CProgram+Files%5CCommon+Files%5CAdobe%5CAGL
    SystemRoot=C%3A%5CWINDOWS
    COMSPEC=C%3A%5CWINDOWS%5Csystem32%5Ccmd.exe
    PATHEXT=.COM%3B.EXE%3B.BAT%3B.CMD%3B.VBS%3B.VBE%3B.JS%3B.JSE%3B.WSF%3B.WSH
    WINDIR=C%3A%5CWINDOWS
    SERVER_SIGNATURE=
    SERVER_SOFTWARE=Apache%2F2.2.21+%28Win32%29+PHP%2F5.3.8
    SERVER_NAME=localhost
    SERVER_ADDR=127.0.0.1
    SERVER_PORT=80
    REMOTE_ADDR=127.0.0.1
    DOCUMENT_ROOT=C%3A%2Fwamp%2Fwww%2F
    SERVER_ADMIN=admin%40localhost
    SCRIPT_FILENAME=C%3A%2Fwamp%2Fwww%2Ftests%2Ftestmailtracker.php
    REMOTE_PORT=3980
    GATEWAY_INTERFACE=CGI%2F1.1
    SERVER_PROTOCOL=HTTP%2F1.1
    REQUEST_METHOD=GET
    QUERY_STRING=
    REQUEST_URI=%2Ftests%2Ftestmailtracker.php
    SCRIPT_NAME=%2Ftests%2Ftestmailtracker.php
    PHP_SELF=%2Ftests%2Ftestmailtracker.php
    REQUEST_TIME=1348632187
    
     COOKIE:
    emailtest=This+is+some+test+data
    emailtest2=Some+more+cookie+data
    deviceorder=01234567
    device=6
    network_type=0
    
    This looks like a lot, but the critical pieces of data that they have are:

    REMOTE_ADDR=127.0.0.1 (my ip if I weren't running this through a local server)
    HTTP_USER_AGENT=Mozilla%2F5.0+%28Windows+NT+5.1%29+AppleWebKit%2F537.1+%28KHTML%2C+like+Gecko%29+Chrome%2F21.0.1180.89+Safari%2F537.1 (my browser footprint)

    It even shows the cookie that I set up as test, but the tracking script would have to be on the same domain as the place the cookie originated for this to work.

    So the moral is, don't display images if you don't want to be tracked. You won't be tracked if you hide images.
     
    Last edited: Sep 26, 2012
  18. phatzilla

    phatzilla Supreme Member

    Joined:
    Apr 9, 2009
    Messages:
    1,366
    Likes Received:
    1,017
    IP and useragent, hardly a good fingerprint.
     
  19. dbyrn

    dbyrn Power Member

    Joined:
    Feb 20, 2010
    Messages:
    746
    Likes Received:
    224
    Occupation:
    helping people
    Oh, there are many, many more possible finger prints of a browser. Some servers use java and flash calls to get a list of fonts, for example, which is a very unique fingerprint. Taking it all together you can trace one browser in a million without cookies!.
    Scary.

    D.
     
  20. MichaelW

    MichaelW Registered Member

    Joined:
    Sep 23, 2012
    Messages:
    62
    Likes Received:
    7
    On my Paypal and eBay PC, I'm not install any Java or Flash software. I used different browser for each account.