this post was submitted on 08 Jul 2024
490 points (99.4% liked)
Cybersecurity - Memes
2097 readers
1 users here now
Only the hottest memes in Cybersecurity
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
In the case of using the preview pane, there's a subtle case of displaying external images (img src in HTML) where an attacker can get an idea of what content is getting past email filters. The client will just download the image automatically, and the attacker's webserver logs the activity. I think that can be turned off in various email clients, but folks have to be savvy enough to know to do it.
Doesn’t thunderbird by default not download external images?
Also if I was working IT for some company I would make sure all email clients were configured that way.