News for hackers. Stuff that matters.
Re:Spy pixels in emails 'have become endemic' by Nextgrid on Wednesday February 17, 2021 @03:25AM (#26164022)
I'm not sure why people would be wary of clicking the unsubscribe link on something they explicitly subscribed to in the first place. I mean, they trusted you enough to give you their email address to subscribe in the first place, right?

The only scenario I can think of is when people didn't intentionally subscribe or were coerced into subscribing and those newsletters can go to hell and fully deserve to be marked as spam.

Re:Spy pixels in emails 'have become endemic' by mike-cardwell on Wednesday February 17, 2021 @03:52AM (#26164208)
I run https://www.emailprivacytester.com - People will visit my site, enter their email address, receive an email from me, click the "confirm" link in that email, then once confirmed that they control the email address, go to another section of the website and send themselves a test email.

Then they will go into their email client and click the spam button on both of the emails that I sent them. The confirmation email, and also the test email.

Even though they requested these emails. Even though both emails have an unsubscribe header and link which takes them to a place where they can opt-out in perpetuity from receiving any further email from me.

I know this, because I get feedback loop emails when people do it.

This happens regularly.

Re:Spy pixels in emails 'have become endemic' by wruza on Wednesday February 17, 2021 @05:09AM (#26164742)
They do that because they have no guarantee that a site will respect an “unsubscribe” request, and it wouldn’t drag them through a shady multi-step “but why” dialog, and it wouldn’t send them another email with “Dear sucker, we see your request and sadly have to react, but you know how these servers work, right? Wait for a week or twelve before all our systems are aware that you wanted to unsubscribe from one of our many non-enumerable spam channels. And if they don’t, feel free to repeat, best regards”. Fair players like you are so rare these days, and to them you are yet another nobody who gets rich on ads and spam.
Re:Spy pixels in emails 'have become endemic' by mike-cardwell on Wednesday February 17, 2021 @07:02AM (#26165439)
I think you're missing the point. They opted in to receiving my email. They handed over their email address to me and requested that I send them an email.

They then told their email provider that the email they requested was spam.

I've considered putting up a page with a list of these peoples email addresses, but I feel like it would end up causing me more problems than it's worth.

[edit] There should be a system where I can prove to an email provider that I was in fact given permission to send to an address (for a period of time, and/or for a specific quantity of messages). If there was a standard email header where you could stick a callback URL like:

  Request-Permission: url=https://www.example.com/callback period=1D count=10
Then when e.g Google receives this message, they could have some sort of UI to say "The sender of this email wants permission to send you up to 10 emails for the next 24 hours". The user when then click yes or no. If yes, Google would fire off a request to my callback URL, so both me and Google knows I have permission. Google could then skip/reduce spam filtering for those emails then too.
Re:Spy pixels in emails 'have become endemic' by hedora on Wednesday February 17, 2021 @02:01PM (#26170110)
Maybe a “click here to receive future emails” button in gmail that basically added your sending address to their spam filter allow list, and sent you a feedback loop email.

Once pressed, it would replace the “spam” UI element with “unsubscribe”.

Re:Spy pixels in emails 'have become endemic' by wruza on Wednesday February 17, 2021 @07:37AM (#26165672)
They opted in to receiving my email. They handed over their email address to me and requested that I send them an email.

Yes. It’s clear that you have no intention to reach them afterwards. But to them it is not so clear, and they mark these innocent letters as spam preventively, out of habit, cause other sites committed abuse in the past and they don’t want to test yet another service’s good nature. Much easier to ban you forever and forget about that, even before you did something unexpected. I know it’s unfair, and I don’t act like that, but they can and some of them do. No time on their hands to differentiate. Modern email culture is rotten to the core and popular email services only cultivate that.

Re:Spy pixels in emails 'have become endemic' by relix on Wednesday February 17, 2021 @04:27AM (#26164450)
I believe it's because even though most newsletters are acting 100% legit (it would be pretty hard to keep going if not), there's always a few that would act like jerks and not actually unsubscribe you, or make you jump through extra hoops. Even if that's only 5% of the newsletters, those are the times that you as the reader would remember happening. A smooth unsubscribe experience is not memorable.

It's worse because the next time you receive a post from a newsletter you unsubscribed from, which may be weeks after you unsubscribed, you may actually start doubting if you did unsubscribe from them. There's no way to know, and this seeds some doubt in your mind.

So the next time you want to unsubscribe from a newsletter, legit or not, you're just going to press the spam button because there's no downside to you as the reader, but there is the upside that your mail client will from now on keep out the newsletter posts no matter if the newsletter would actually have unsubscribed you or not. Basically the "mark as spam" button is a 100%-unsubscribe button, while the unsubscribe button is a 95%-unsubscribe button.

I don't believe the situation of malicious actors in newsletters is actually as bad as some HN comments make it appear. Most legit use double opt-in and have good unsubscribe policies. As usual it's the few bad ones that ruin it for everyone.

Re:Spy pixels in emails 'have become endemic' by kergonath on Wednesday February 17, 2021 @12:56PM (#26169326)
> the unsubscribe button is a 95%-unsubscribe button.

I wish I had a 95% success rate when trying to unsubscribe...

Re:Spy pixels in emails 'have become endemic' by beckingz on Wednesday February 17, 2021 @11:34AM (#26168266)
And then there are services that require you to log in to unsubscribe...
Re:Spy pixels in emails 'have become endemic' by goostavos on Wednesday February 17, 2021 @02:08PM (#26170198)
I encountered one where trying to unsubscribe required me to not just log in, but, if I wanted to change my email settings, also enter a password. However, this site used single sign on, so... there was no password to enter.

I've given up on unsubscribing the 'right' way. Too much bs most of the time. It's now just mark as spam and move on.

Re:Spy pixels in emails 'have become endemic' by meowster on Wednesday February 17, 2021 @12:17PM (#26168780)
I've only run into that once personally. It was a major US business that I signed up with. It violated the CAN-SPAM law, so I marked it as spam.

I'm not sorry if I threw anyone's metrics off, they broke the law, they spammed me, it's on them.

Re:Spy pixels in emails 'have become endemic' by billysielu on Wednesday February 17, 2021 @03:51AM (#26164206)
I've unsubscribed before only to find myself subscribed to a bunch of similar things instead. Clicking a link confirms your address reaches a person and is therefore worth spamming. Plus the risk of phishing. Plus the dark patterns in the unsubscribe UI.
Re:Spy pixels in emails 'have become endemic' by peteretep on Wednesday February 17, 2021 @05:08AM (#26164738)
> Clicking a link confirms your address reaches a person and is therefore worth spamming

I think this is received wisdom that might have been true 20 years ago, but doesn’t stand up to scrutiny.

Re:Spy pixels in emails 'have become endemic' by ColinWright on Wednesday February 17, 2021 @06:46AM (#26165352)
I use unique email addresses for everything, so I know where emails come from. More than once in the last two years I have unsubscribed from lists using the unsubscribe link, only then to have that email address received emails from new sources.

So for me, it does stand up to scrutiny, it still happens.

Re:Spy pixels in emails 'have become endemic' by peteretep on Wednesday February 17, 2021 @05:45PM (#26172834)
I don’t think you’ve proved implication here though; as plausible an explanation is simply that the original source has sold your information on regardless?
Re:Spy pixels in emails 'have become endemic' by ColinWright on Wednesday February 17, 2021 @06:27PM (#26173268)
It's the timing that makes it suspicious. It's exactly for this reason that I usually don't click the "unsubscribe" link for the first few emails I get. After all, if it's a one-off, why bother?

But I have scripts that count them, and when they get to five I then make the decision. Again, sometimes I continue simply to bin them, but sometimes I click the unsubscribe link. Mostly then they stop and there's no additional problem, but more than once that address has been used on other spam emails, and only after the unsubscribe.

Do you have actual evidence that it doesn't happen? You might, as others have, be arguing that it's not worth the spammers' effort. But setting up a script triggered by an unsubscribe is pretty trivial, and emails can then be sold at a premium, accompanied by a certificate of sorts that the address is valid.

So maybe it is worth their while.

Re:Spy pixels in emails 'have become endemic' by plorg on Wednesday February 17, 2021 @08:31AM (#26166063)
I keep a pretty tidy inbox by studiously unsubscribing from advertorial mail as soon as I receive it. I make no exceptions. Consequentially, it's fairly easy to notice when an unsubscribe action didn't work.

I've noticed a few times that a company I have unsubscribed from years ago will suddenly start sending me mail again. Usually I'll just re-unsubscribe and they'll go away again.

I've also had it several times that I clicked on an Unsubscribe link and the resultant page indicated I had been removed from the list but I continued to receive mail noticeably past the date indicated ("it may take up to a week for your name to be removed, as some mail is queued in advance"). Conveniently, when I followed the link with my ad blocker disabled the request succeeded (without any change in appearance), but I actually stopped receiving their spam.

I can't say anything about email newsletters, because I don't subscribe to them.

Re:Spy pixels in emails 'have become endemic' by meowster on Wednesday February 17, 2021 @12:20PM (#26168818)
The resending emails after a few years after I unsubscribed happened to me once. I marked it as spam, and it still shows up in my spam folder. It seems like a noble company, but as far as I can tell, they broke US law while spamming me, so I will not lose any sleep over it.
Re:Spy pixels in emails 'have become endemic' by jjulius on Wednesday February 17, 2021 @12:03PM (#26168613)
>I'm not sure why people would be wary of clicking the unsubscribe link on something they explicitly subscribed to in the first place. I mean, they trusted you enough to give you their email address to subscribe in the first place, right?

You're assuming that they willingly signed up for it and weren't added to the list because of someone selling their data to another marketer, a dark UX pattern tricking them into signing up for the newsletter when they made a purchase, etc.

Re:Spy pixels in emails 'have become endemic' by kergonath on Wednesday February 17, 2021 @12:09PM (#26168684)
> those newsletters can go to hell and fully deserve to be marked as spam.

I tend to agree. Also, newsletter that try to track me with invisible pixels can go to hell, too.

Re:Spy pixels in emails 'have become endemic' by OJFord on Wednesday February 17, 2021 @04:04AM (#26164282)
Yes, I do it then, but also I get stuff where I've never had anything to do with the company at all even, not just ordered something and not agreed to receive marketing emails.

Sometimes the spam/phishing line is hard to draw (especially without clicking a link and seeing what they try to make me do) and the 'unsubscribe' link is clearly just part of it, too.

Does anyone know what 'report phishing' actually does in Fastmail? I've had to use it a lot recently, and could easily create a rule for when I've been doing it, if only 'report phishing' was an available action. That it isn't makes me wonder if there's manual review or something so they don't want so much bulk? (And in that case probably also don't/want need my tens of ~duplicates a day.)

Re:Spy pixels in emails 'have become endemic' by andreareina on Wednesday February 17, 2021 @03:43AM (#26164147)
> The only scenario I can think of is when people didn't intentionally subscribe or were coerced into subscribing and those newsletters can go to hell and fully deserve to be marked as spam.

Yeah that's the better part of 95% of them for me.

Re:Spy pixels in emails 'have become endemic' by lawl on Wednesday February 17, 2021 @03:55AM (#26164230)
> Yeah that's the better part of 95% of them for me.

100% of them for me because i don't want any stupid newsletters. Yes, all of them go into the spam folder.

For some business that I otherwise am a customer off i also forward their shit spam to their support and tell them to unsubscribe me, even if they have a link. For the simple reason that if they feel like they can waste my time with their shit, i'm gonna waste theirs too.

Re:Spy pixels in emails 'have become endemic' by Nextgrid on Wednesday February 17, 2021 @03:46AM (#26164162)
It seems like a non-problem, ie the system working as designed, and the GP is just misled by "best practices" peddled by email marketing scum?

If you're running a legit newsletter that people want I can't imagine enough people would be marking it as spam for it to actually affect your reputation.

Re:Spy pixels in emails 'have become endemic' by tomtheelder on Wednesday February 17, 2021 @03:27AM (#26164033)
I think the original commenter really did mean weary and not wary. It's just a pain to be constantly unsubscribing from things, most of which you probably didn't intentionally subscribe to in the first place.
Re:Spy pixels in emails 'have become endemic' by relix on Wednesday February 17, 2021 @06:43AM (#26165324)
I did indeed mean weary.
Re:Spy pixels in emails 'have become endemic' by nickff on Wednesday February 17, 2021 @03:29AM (#26164048)
People often forget what they signed up for, especially if the newsletter is relatively infrequent. This is to be expected, given the large volume of newsletters and spam.
Re:Spy pixels in emails 'have become endemic' by Nextgrid on Wednesday February 17, 2021 @03:37AM (#26164105)
Is it really a big problem then? People who care about reading the content would counteract the problem even if it does get flagged as spam. Ultimately if your content is of any value then people will find a way to read it and the spam filters will learn from that.