News for hackers. Stuff that matters.
Re:Using gmail with mutt (2016) by lstamour on Monday April 30, 2018 @11:19PM (#16964364)
Gmail relatively recently changed to intercept images and cache them all for you, preventing the leak. But then, this is Google we’re talking about. I’m sure there’s still a leak, maybe via AMP for Email. (Of course, hyperlinks are also often used for tracking.)
Re:Using gmail with mutt (2016) by zAy0LfpBZLC8mAC on Tuesday May 01, 2018 @07:23AM (#16966114)
Only images? So, fonts can still be used to leak and manipulate?
Re:Using gmail with mutt (2016) by lstamour on Tuesday May 01, 2018 @10:21PM (#16973574)
Well, no, custom web fonts generally aren’t supported by email clients, email within Gmail is sanitized by default.

And I stand slightly corrected: by customizing email image URLs, you can apparently track the first open, but not user details (IP address, device, subsequent opens, etc.) https://customer.io/blog/gmail-loading-images.html