Re: Mail insecurity

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	Jolly Roger <jollyroger@pobox.com>
Newsgroups	comp.sys.mac.system
Subject	Re: Mail insecurity
Date	11 Jan 2015 14:26:47 GMT
Organization	People for the Ethical Treatment of Pirates
Lines	39
Message-ID	<chffh6F72aeU4@mid.individual.net> (permalink)
References	<54b034cb$0$56564$c3e8da3$38634283@news.astraweb.com> <chavn3F2b8iU3@mid.individual.net> <chepgfF16aiU1@mid.individual.net>
X-Trace	individual.net M4HKbD8rhHA2jjniWb7xfAh3DH87B+LtdkiRN+5YyJGwqDq7Cw
Cancel-Lock	sha1:iri8RspyD17Z+WC5NPvFLbqbAXM=
X-Face	_.g>n!a$f3/H3jA]>9pN555<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zki`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'\|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b\|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent	slrn/1.0.1 (Darwin)
Xref	csiph.com comp.sys.mac.system:68235

Show key headers only | View raw

On 2015-01-11, android <here@there.was> wrote:
> In article <chavn3F2b8iU3@mid.individual.net>,
>  Jolly Roger <jollyroger@pobox.com> wrote:
>
>> On 2015-01-09, Warren Oates <warren.oates@gmail.com> wrote:
>> ><http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose-
>> > private-details-of-apple-mail-users.html>
>> >
>> > All one line, dat.
>> 
>> "Insecurity"? Hardly. Emails sent to you with tracking images are
>> displayed with the images. Trackers get to know you read an email they
>> sent you. The world won't stop spinning, and the security of your
>> computer is not compromised. Much ado about essentially nothing. In the
>> mean time, Apple will naturally fix it to honor your settings in the
>> Mail application.
>
> Until then your mail app sends out receipts on all the mails you've kept 
> inside the Mail database... Cute! :-p

You clearly don't have a good understanding of the issue at hand.
Spotlight searches may contain email messages in the result sets.
Naturally, if you are searching for specific terms using Spotlight, your
result set won't include all mails in the database, since only a certain
number of them will match your search term. Furthermore, the mere
existence of messages in the result set isn't enough to trigger the
problem. You, the user, must then *select* a message in the Spotlight
results list to *preview* the message, which triggers the image to be
displayed within the preview. That means only a select few messages that
you specifically select and preview will trigger the problem. There's
essentially no way for all messages in the database to be previewed
using this mechanism in a real life scenario. Cute attempt at a troll,
but you've failed. ; )

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Thread

Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-09 15:06 -0500
  Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-09 12:19 -0800
    Re: Mail insecurity Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-12 11:07 -0500
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-12 16:15 +0000
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-12 12:06 -0800
  Re: Mail insecurity Davoud <star@sky.net> - 2015-01-09 15:55 -0500
    Re: Mail insecurity Wilbur Eleven <wil@nowhere.at.all.ru.ca.fr.uk.us> - 2015-01-10 08:33 -0500
      Re: Mail insecurity Savageduck <savageduck1@{REMOVESPAM}me.com> - 2015-01-10 06:30 -0800
      Re: Mail insecurity Davoud <star@sky.net> - 2015-01-11 09:48 -0500
  Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-09 21:32 +0000
    Re: Mail insecurity android <here@there.was> - 2015-01-11 09:10 +0100
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 00:39 -0800
        Re: Mail insecurity android <here@there.was> - 2015-01-11 10:09 +0100
          Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 01:14 -0800
            Re: Mail insecurity android <here@there.was> - 2015-01-11 10:41 +0100
              Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:28 +0000
              Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 11:48 -0800
                Re: Mail insecurity android <here@there.was> - 2015-01-11 20:56 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:04 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 20:09 +0000
                Re: Mail insecurity android <here@there.was> - 2015-01-11 21:24 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:28 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 21:49 +0000
                Re: Mail insecurity Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-01-11 23:16 +0000
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
        Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:26 +0000
        Re: Mail insecurity android <here@there.was> - 2015-01-11 15:42 +0100
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:58 +0000
            Re: Mail insecurity android <here@there.was> - 2015-01-11 16:16 +0100
            Re: Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-11 19:01 -0500
  Re: Mail insecurity Nelson <nelson@nowhere.com> - 2015-01-11 13:19 -0500

csiph-web