Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Mail insecurity
Date: 11 Jan 2015 14:26:47 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 39
Message-ID: <chffh6F72aeU4@mid.individual.net>
References: <54b034cb$0$56564$c3e8da3$38634283@news.astraweb.com> <chavn3F2b8iU3@mid.individual.net> <chepgfF16aiU1@mid.individual.net>
X-Trace: individual.net M4HKbD8rhHA2jjniWb7xfAh3DH87B+LtdkiRN+5YyJGwqDq7Cw
Cancel-Lock: sha1:iri8RspyD17Z+WC5NPvFLbqbAXM=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:68235

On 2015-01-11, android <here@there.was> wrote:
> In article <chavn3F2b8iU3@mid.individual.net>,
>  Jolly Roger <jollyroger@pobox.com> wrote:
>
>> On 2015-01-09, Warren Oates <warren.oates@gmail.com> wrote:
>> ><http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose-
>> > private-details-of-apple-mail-users.html>
>> >
>> > All one line, dat.
>> 
>> "Insecurity"? Hardly. Emails sent to you with tracking images are
>> displayed with the images. Trackers get to know you read an email they
>> sent you. The world won't stop spinning, and the security of your
>> computer is not compromised. Much ado about essentially nothing. In the
>> mean time, Apple will naturally fix it to honor your settings in the
>> Mail application.
>
> Until then your mail app sends out receipts on all the mails you've kept 
> inside the Mail database... Cute! :-p

You clearly don't have a good understanding of the issue at hand.
Spotlight searches may contain email messages in the result sets.
Naturally, if you are searching for specific terms using Spotlight, your
result set won't include all mails in the database, since only a certain
number of them will match your search term. Furthermore, the mere
existence of messages in the result set isn't enough to trigger the
problem. You, the user, must then *select* a message in the Spotlight
results list to *preview* the message, which triggers the image to be
displayed within the preview. That means only a select few messages that
you specifically select and preview will trigger the problem. There's
essentially no way for all messages in the database to be previewed
using this mechanism in a real life scenario. Cute attempt at a troll,
but you've failed. ; )

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR