Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #68305

Re: Mail insecurity

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!newsfeed.straub-nv.de!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Jolly Roger <jollyroger@pobox.com>
Newsgroups comp.sys.mac.system
Subject Re: Mail insecurity
Date 12 Jan 2015 16:15:41 GMT
Organization People for the Ethical Treatment of Pirates
Lines 47
Message-ID <chia9dFu1h3U1@mid.individual.net> (permalink)
References <54b034cb$0$56564$c3e8da3$38634283@news.astraweb.com> <m8pd4b$ebf$1@news.datemas.de> <54b3f124$0$58733$c3e8da3$88b277c5@news.astraweb.com>
X-Trace individual.net 5jJB8Ork1GkDO6ImUJ8sDgI2grYgJXcKKjTrQNwW6RuCHcZspW
Cancel-Lock sha1:nRHDh8JQwLX6slmEHYqEBv7B9SQ=
X-Face _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent slrn/1.0.1 (Darwin)
Xref csiph.com comp.sys.mac.system:68305

Show key headers only | View raw

On 2015-01-12, Jerry Bishop <jerry.bishop@nowhere.nohow.com> wrote:
> On 2015-01-09 20:19:24 +0000, Alan Baker said:
>
>> On 2015-01-09 20:06:35 +0000, Warren Oates said:
>> 
>>> <http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose-
>>> private-details-of-apple-mail-users.html>
>>> 
>>> All one line, dat.
>> 
>> By "private details"...
>> 
>> ...they mean "IP address".
>
> Telling the spammers they have a live machine at the other end of a 
> message, thereby provoking more spam.

It won't make all that much difference in the end, since the vast
majority of spam messages are sent without regard for weather the
address in question is valid, and spam filtering takes care of spam just
fine for lots of folks.

> And possibly opening up the machine for a drive-by malware download.

Nope, the machine is no more open to malware than before.

> I set the option for not viewing remote content without express 
> permission for a reason, and the Spotlight needs to honor that setting. 

And it will, as soon as Apple fixes this omission. In the mean time,
avoiding the issue is as simple as refraining from viewing previews of
emails in Spotlight search results. Simple.

>  Although this isn't the most dangerous bug in the world by a long 
> shot, it's still clearly a bug with implications.

Sure, though nowhere near as bad as some are claiming.

> Hopefully this will be fixed in 10.10.2.

I have faith it will be addressed by Apple in a future update.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-09 15:06 -0500
  Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-09 12:19 -0800
    Re: Mail insecurity Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-12 11:07 -0500
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-12 16:15 +0000
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-12 12:06 -0800
  Re: Mail insecurity Davoud <star@sky.net> - 2015-01-09 15:55 -0500
    Re: Mail insecurity Wilbur Eleven <wil@nowhere.at.all.ru.ca.fr.uk.us> - 2015-01-10 08:33 -0500
      Re: Mail insecurity Savageduck <savageduck1@{REMOVESPAM}me.com> - 2015-01-10 06:30 -0800
      Re: Mail insecurity Davoud <star@sky.net> - 2015-01-11 09:48 -0500
  Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-09 21:32 +0000
    Re: Mail insecurity android <here@there.was> - 2015-01-11 09:10 +0100
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 00:39 -0800
        Re: Mail insecurity android <here@there.was> - 2015-01-11 10:09 +0100
          Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 01:14 -0800
            Re: Mail insecurity android <here@there.was> - 2015-01-11 10:41 +0100
              Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:28 +0000
              Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 11:48 -0800
                Re: Mail insecurity android <here@there.was> - 2015-01-11 20:56 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:04 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 20:09 +0000
                Re: Mail insecurity android <here@there.was> - 2015-01-11 21:24 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:28 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 21:49 +0000
                Re: Mail insecurity Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-01-11 23:16 +0000
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
        Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:26 +0000
        Re: Mail insecurity android <here@there.was> - 2015-01-11 15:42 +0100
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:58 +0000
            Re: Mail insecurity android <here@there.was> - 2015-01-11 16:16 +0100
            Re: Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-11 19:01 -0500
  Re: Mail insecurity Nelson <nelson@nowhere.com> - 2015-01-11 13:19 -0500

csiph-web