Saturday, December 24, 2005

Wanna know if you're being snooped on?

Watching the Watchers

From ComputerBytesMan:
The steps are:

1. Set up a Hotmail account.
2. Set up a second email account with a non-U.S. provider. (eg. Rediffmail.com)
3. Send messages between the two accounts which might be interesting to the NSA.
4. In each message, include a unique URL to a Web server that you have access to its server logs. This URL should only be known by you and not linked to from any other Web page. The text of the message should encourage an NSA monitor to visit the URL.
5. If the server log file ever shows this URL being accessed, then you know that you are being snooped on. The IP address of the access can also provide clues about who is doing the snooping.

The trick is to make the link enticing enough for someone or something to want to click on it. As part of a large-scale research project, I would suggest sending out a few hundred thousand messages using various tricks to find one that might work. Here are some possible ideas:

(Found on BoingBoing, who links to Dave Farber's warning that you might not want to try this if you want to fly via TSA-style strip search.)

I don't think I have the guts to try this. Great idea, though.