Re: Mail insecurity

From	Jolly Roger <jollyroger@pobox.com>
Newsgroups	comp.sys.mac.system
Subject	Re: Mail insecurity
Date	2015-01-11 14:28 +0000
Organization	People for the Ethical Treatment of Pirates
Message-ID	<chffkeF72aeU7@mid.individual.net> (permalink)
References	(2 earlier) <chepgfF16aiU1@mid.individual.net> <m8tcsj$uj1$1@news.datemas.de> <chesuiF26fdU2@mid.individual.net> <m8tets$2ak$1@news.datemas.de> <cheupgF2laeU2@mid.individual.net>

Show all headers | View raw

On 2015-01-11, android <here@there.was> wrote:
> In article <m8tets$2ak$1@news.datemas.de>,
>  Alan Baker <alangbaker@telus.net> wrote:
>
>> On 2015-01-11 09:09:38 +0000, android said:
>> 
>> > In article <m8tcsj$uj1$1@news.datemas.de>,
>> >  Alan Baker <alangbaker@telus.net> wrote:
>> > 
>> >> On 2015-01-11 08:10:54 +0000, android said:
>> >> 
>> >>> In article <chavn3F2b8iU3@mid.individual.net>,
>> >>> Jolly Roger <jollyroger@pobox.com> wrote:
>> >>> 
>> >>>> On 2015-01-09, Warren Oates <warren.oates@gmail.com> wrote:
>> >>>>> <http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose
>> >>>>> -
>> >>>>> private-details-of-apple-mail-users.html>
>> >>>>> 
>> >>>>> All one line, dat.
>> >>>> 
>> >>>> "Insecurity"? Hardly. Emails sent to you with tracking images are
>> >>>> displayed with the images. Trackers get to know you read an email they
>> >>>> sent you. The world won't stop spinning, and the security of your
>> >>>> computer is not compromised. Much ado about essentially nothing. In the
>> >>>> mean time, Apple will naturally fix it to honor your settings in the
>> >>>> Mail application.
>> >>> 
>> >>> Until then your mail app sends out receipts on all the mails you've kept
>> >>> inside the Mail database... Cute! :-p
>> >> 
>> >> What is that other than idle speculation?
>> > 
>> > You didn't read the article, did you?
>> 
>> Actually, I did.
>> 
>> Here's what it said:
>> 
>> "A preview of the unopened emails was shown by Spotlight, which 
>> revealed to the operator of the server hosting the pixels the 
>> receiver’s IP address, current OS version and some details about the 
>> browser used as well as the version of Quick Look, a program that let’s 
>> users preview a document."
>> 
>> So basically, IP address plus some generic info about the computer being 
>> used.
>> 
>> Nothing about "receipts on all the mails you've kept inside the Mail 
>> database"...
>> 
>> ...whatever you think you meant.
>
> But it does. The most common receipt is to tag files downloaded when the 
> mail is opened. That happens when Spotlight indexes the Yosemite Mail 
> database to generate previews.

Wrong. Previews aren't generated before users ask to see the preview.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Thread

Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-09 15:06 -0500
  Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-09 12:19 -0800
    Re: Mail insecurity Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-12 11:07 -0500
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-12 16:15 +0000
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-12 12:06 -0800
  Re: Mail insecurity Davoud <star@sky.net> - 2015-01-09 15:55 -0500
    Re: Mail insecurity Wilbur Eleven <wil@nowhere.at.all.ru.ca.fr.uk.us> - 2015-01-10 08:33 -0500
      Re: Mail insecurity Savageduck <savageduck1@{REMOVESPAM}me.com> - 2015-01-10 06:30 -0800
      Re: Mail insecurity Davoud <star@sky.net> - 2015-01-11 09:48 -0500
  Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-09 21:32 +0000
    Re: Mail insecurity android <here@there.was> - 2015-01-11 09:10 +0100
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 00:39 -0800
        Re: Mail insecurity android <here@there.was> - 2015-01-11 10:09 +0100
          Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 01:14 -0800
            Re: Mail insecurity android <here@there.was> - 2015-01-11 10:41 +0100
              Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:28 +0000
              Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 11:48 -0800
                Re: Mail insecurity android <here@there.was> - 2015-01-11 20:56 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:04 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 20:09 +0000
                Re: Mail insecurity android <here@there.was> - 2015-01-11 21:24 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:28 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 21:49 +0000
                Re: Mail insecurity Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-01-11 23:16 +0000
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
        Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:26 +0000
        Re: Mail insecurity android <here@there.was> - 2015-01-11 15:42 +0100
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:58 +0000
            Re: Mail insecurity android <here@there.was> - 2015-01-11 16:16 +0100
            Re: Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-11 19:01 -0500
  Re: Mail insecurity Nelson <nelson@nowhere.com> - 2015-01-11 13:19 -0500

csiph-web