News for hackers. Stuff that matters.
Re:Images Now Showing in Gmail by dragonwriter on Thursday December 12, 2013 @02:55PM (#6896693)
> Google will only load your image if you open the email, which means Google has just opted-in all users to mail receipts.

If you didn't have the "ask before displaying external content" option set before this change, you were "opted-in" to read receipts already -- its just that, due to protections designed to stop other malicious use of images, you were incidentally protected against images as the vector for silent read receipts.

With this change, you are better protected against the malicious uses of images the default-not-to-display option was designed to protect against, but exposed to external images as a vector for read receipts if you hadn't chosen to display external content only after confirmation. If you did choose that previously, then you also got the new "ask before displaying external images" chosen by default -- so if you were protected from senders injecting read receipts before, you still are now. If you weren't before, you aren't now, but then that's not really a change.

There are no comments on this comment yet.