News for hackers. Stuff that matters.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by d4l3k on Friday September 21, 2018 @02:38PM (#18041722)
Pixel trackers are just small embedded images in the email that when they are fetched from a server, the server logs it. Pretty simple way to track whether or not someone has opened an email. It's my understanding that gmail however downloads all images and then serves them from Google servers to avoid this issue entirely.

Traditional email clients like Outlook/Thunderbird are susceptible to this kind of attack. That's why they often ask you before loading images.

https://smallbusiness.chron.com/set-email-tracking-pixel-493...

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by Sephr on Friday September 21, 2018 @06:51PM (#18043269)
All Google does is proxy the images to hide your IP address. The images are proxied on-read so read receipts are still being leaked.

A Google employee has confirmed to me that they tested killing email read receipts but it was shelved as it broke too many partner integrations.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by nil_pointer on Friday September 21, 2018 @02:50PM (#18041807)
Variants of "pixel trackers" still work fine on Gmail despite this. To this day a lot of marketing, recruiters and others are tracking when you open their message on Gmail.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by Bedon292 on Friday September 21, 2018 @03:20PM (#18041989)
How are these variants working? Curious about how they are getting around google hitting all of them.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by LucasBrandt on Friday September 21, 2018 @03:51PM (#18042177)
I assume Google doesn't request the image until the email is opened.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by kevin_thibedeau on Friday September 21, 2018 @04:10PM (#18042313)
Even with images disabled?
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by jiaweihli on Friday September 21, 2018 @07:56PM (#18043573)
No, disabling images breaks pixel tracking. One way to quickly sanity check a mail client's priorities is whether it gives you the option to disable images by default.

Some clients that don't allow you to disable by default: Polymail, Gmail on iOS, Inbox (Google) on IOS

If it's free, you're the product...

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by jkn on Sunday September 23, 2018 @04:03AM (#18049983)
Ha I thought you were wrong, but it turns out that indeed, you can disable image loading in the Gmail Web interface, in the Android app, but not on iOS: https://support.google.com/mail/answer/145919?co=GENIE.Platf...