News for hackers. Stuff that matters.
Re:Show HN: Super Mail Forward, an HTML email that evolves a... by kecks on Thursday January 21, 2016 @08:06PM (#10949985)
This can leak the user's client by changing links per client.

Make a link per identifiable client, show only the one for the current client, and give each link a post/get parameter identifying the client. Quite easy to do, but a lot of work to have broad client support.

Tada! I now know you read your email on your [obscure and bugged client], which is susceptible to [this and that exploit].

Re:Show HN: Super Mail Forward, an HTML email that evolves a... by Houshalter on Thursday January 21, 2016 @08:21PM (#10950055)
Why not just insert the exploit into the first email? What do you gain by identifying the client?
Re:Show HN: Super Mail Forward, an HTML email that evolves a... by kecks on Monday February 01, 2016 @07:36PM (#11016881)
This is an exploit as well, just a different kind. It doesn't require any programming errors in the clients, instead it relies on the non-standardization of clients.