I have reasons to think that my private message are watched by the site's support that I'm on. This is legal due to the TOS I had to valid when I subscribed to this website.
Howewer, I would like to collect informations about them to prevent any future incoming problem. I thought about honeypot, this is how I imagine it :
I send a failed
bbcode to a friend leading to a look like picture link :
[img]http://evil.com/mypicture.png[/im]g. I assume such a link can be some kind of html page, using
Apache), or a low level run time environment such as
The Spy in the Sandbox. In this private message, my friend knows that and accept it. In this case, sending him this link is legal.
This become tricky when the support will discover this private message. They will think about a basic failed
bbcode and copy/paste the link in their browser to see the picture. The attack will then execute itself in their browser and give me some informations about us.
Is honeypot the correct term to designate this attack ?
Is it legal to store and read the informations I'll have collected ?