Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #68268

Re: Mail insecurity

From Alan Baker <alangbaker@telus.net>
Newsgroups comp.sys.mac.system
Subject Re: Mail insecurity
Date 2015-01-11 11:48 -0800
Organization Datemas.de http://www.news.datemas.de
Message-ID <m8uk37$imf$1@news.datemas.de> (permalink)
References <54b034cb$0$56564$c3e8da3$38634283@news.astraweb.com> <cheupgF2laeU2@mid.individual.net>

Show all headers | View raw


On 2015-01-11 09:41:04 +0000, android said:

> In article <m8tets$2ak$1@news.datemas.de>,
>  Alan Baker <alangbaker@telus.net> wrote:
> 
>> On 2015-01-11 09:09:38 +0000, android said:
>> 
>>> In article <m8tcsj$uj1$1@news.datemas.de>,
>>> Alan Baker <alangbaker@telus.net> wrote:
>>> 
>>>> On 2015-01-11 08:10:54 +0000, android said:
>>>> 
>>>>> In article <chavn3F2b8iU3@mid.individual.net>,
>>>>> Jolly Roger <jollyroger@pobox.com> wrote:
>>>>> 
>>>>>> On 2015-01-09, Warren Oates <warren.oates@gmail.com> wrote:
>>>>>>> <http://www.itworld.com/article/2867215/glitch-in-os-x-search-can-expose
>>>>>>> -
>>>>>>> private-details-of-apple-mail-users.html>
>>>>>>> 
>>>>>>> All one line, dat.
>>>>>> 
>>>>>> "Insecurity"? Hardly. Emails sent to you with tracking images are
>>>>>> displayed with the images. Trackers get to know you read an email they
>>>>>> sent you. The world won't stop spinning, and the security of your
>>>>>> computer is not compromised. Much ado about essentially nothing. In the
>>>>>> mean time, Apple will naturally fix it to honor your settings in the
>>>>>> Mail application.
>>>>> 
>>>>> Until then your mail app sends out receipts on all the mails you've kept
>>>>> inside the Mail database... Cute! :-p
>>>> 
>>>> What is that other than idle speculation?
>>> 
>>> You didn't read the article, did you?
>> 
>> Actually, I did.
>> 
>> Here's what it said:
>> 
>> "A preview of the unopened emails was shown by Spotlight, which
>> revealed to the operator of the server hosting the pixels the
>> receiver’s IP address, current OS version and some details about the
>> browser used as well as the version of Quick Look, a program that let’s
>> users preview a document."
>> 
>> So basically, IP address plus some generic info about the computer being
>> used.
>> 
>> Nothing about "receipts on all the mails you've kept inside the Mail
>> database"...
>> 
>> ...whatever you think you meant.
> 
> But it does. The most common receipt is to tag files downloaded when the
> mail is opened. That happens when Spotlight indexes the Yosemite Mail
> database to generate previews.

I'm sorry, but is English not your first language?

"The most common receipt is"? What does that mean?

If what you're saying is that when you open an email in html format and 
display the images contained within it, that you are them starting a 
conversation with a remote server that will then know that you read the 
email and a few unimportant details about the system from which you 
read it, that's correct.

But you have no evidence that it happens when Spotlight does the 
indexing, and as far as I know, it doesn't happen.

What does happen is that when you access the Spotlight system to search 
for and then PREVIEW an email, at that time, you get an email preview 
presented complete with images and thus you communicate that you view 
THAT PARTICULAR email.

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-09 15:06 -0500
  Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-09 12:19 -0800
    Re: Mail insecurity Jerry Bishop <jerry.bishop@nowhere.nohow.com> - 2015-01-12 11:07 -0500
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-12 16:15 +0000
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-12 12:06 -0800
  Re: Mail insecurity Davoud <star@sky.net> - 2015-01-09 15:55 -0500
    Re: Mail insecurity Wilbur Eleven <wil@nowhere.at.all.ru.ca.fr.uk.us> - 2015-01-10 08:33 -0500
      Re: Mail insecurity Savageduck <savageduck1@{REMOVESPAM}me.com> - 2015-01-10 06:30 -0800
      Re: Mail insecurity Davoud <star@sky.net> - 2015-01-11 09:48 -0500
  Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-09 21:32 +0000
    Re: Mail insecurity android <here@there.was> - 2015-01-11 09:10 +0100
      Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 00:39 -0800
        Re: Mail insecurity android <here@there.was> - 2015-01-11 10:09 +0100
          Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 01:14 -0800
            Re: Mail insecurity android <here@there.was> - 2015-01-11 10:41 +0100
              Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:28 +0000
              Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 11:48 -0800
                Re: Mail insecurity android <here@there.was> - 2015-01-11 20:56 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:04 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 20:09 +0000
                Re: Mail insecurity android <here@there.was> - 2015-01-11 21:24 +0100
                Re: Mail insecurity Alan Baker <alangbaker@telus.net> - 2015-01-11 12:28 -0800
                Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 21:49 +0000
                Re: Mail insecurity Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-01-11 23:16 +0000
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
        Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:27 +0000
      Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:26 +0000
        Re: Mail insecurity android <here@there.was> - 2015-01-11 15:42 +0100
          Re: Mail insecurity Jolly Roger <jollyroger@pobox.com> - 2015-01-11 14:58 +0000
            Re: Mail insecurity android <here@there.was> - 2015-01-11 16:16 +0100
            Re: Mail insecurity Warren Oates <warren.oates@gmail.com> - 2015-01-11 19:01 -0500
  Re: Mail insecurity Nelson <nelson@nowhere.com> - 2015-01-11 13:19 -0500

csiph-web