Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!us.feeder.erje.net!news2.arglkargh.de!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: android <here@there.was>
Newsgroups: comp.sys.mac.system
Subject: Re: Mail insecurity
Date: Sun, 11 Jan 2015 10:41:04 +0100
Organization: the center
Lines: 57
Message-ID: <cheupgF2laeU2@mid.individual.net>
References: <54b034cb$0$56564$c3e8da3$38634283@news.astraweb.com> <chavn3F2b8iU3@mid.individual.net> <chepgfF16aiU1@mid.individual.net> <m8tcsj$uj1$1@news.datemas.de> <chesuiF26fdU2@mid.individual.net> <m8tets$2ak$1@news.datemas.de>
X-Trace: individual.net qw/SwcV5Ve/3XnNA2H7rvg36XGjbe1kyTcFTv8C0NK0HW6AQPo
X-Orig-Path: here
Cancel-Lock: sha1:wv5p2J5GSjDuecgiESF6pj/wOTk=
User-Agent: MT-NewsWatcher/3.5.2 (Intel Mac OS X)
Xref: csiph.com comp.sys.mac.system:68228

In article <m8tets$2ak$1@news.datemas.de>,
 Alan Baker <alangbaker@telus.net> wrote:

> On 2015-01-11 09:09:38 +0000, android said:
> 
> > In article <m8tcsj$uj1$1@news.datemas.de>,
> >  Alan Baker <alangbaker@telus.net> wrote:
> > 
> >> On 2015-01-11 08:10:54 +0000, android said:
> >> 
> >>> In article <chavn3F2b8iU3@mid.individual.net>,
> >>> Jolly Roger <jollyroger@pobox.com> wrote:
> >>> 
> >>>> On 2015-01-09, Warren Oates <warren.oates@gmail.com> wrote:
> >>>>> <http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose
> >>>>> -
> >>>>> private-details-of-apple-mail-users.html>
> >>>>> 
> >>>>> All one line, dat.
> >>>> 
> >>>> "Insecurity"? Hardly. Emails sent to you with tracking images are
> >>>> displayed with the images. Trackers get to know you read an email they
> >>>> sent you. The world won't stop spinning, and the security of your
> >>>> computer is not compromised. Much ado about essentially nothing. In the
> >>>> mean time, Apple will naturally fix it to honor your settings in the
> >>>> Mail application.
> >>> 
> >>> Until then your mail app sends out receipts on all the mails you've kept
> >>> inside the Mail database... Cute! :-p
> >> 
> >> What is that other than idle speculation?
> > 
> > You didn't read the article, did you?
> 
> Actually, I did.
> 
> Here's what it said:
> 
> "A preview of the unopened emails was shown by Spotlight, which 
> revealed to the operator of the server hosting the pixels the 
> receiver’s IP address, current OS version and some details about the 
> browser used as well as the version of Quick Look, a program that let’s 
> users preview a document."
> 
> So basically, IP address plus some generic info about the computer being 
> used.
> 
> Nothing about "receipts on all the mails you've kept inside the Mail 
> database"...
> 
> ...whatever you think you meant.

But it does. The most common receipt is to tag files downloaded when the 
mail is opened. That happens when Spotlight indexes the Yosemite Mail 
database to generate previews.
-- 
teleportation kills