logoalt Hacker News

AStonesThrow10/01/20242 repliesview on HN

It used to be, on some mail readers, that "opening" an email message could unleash Pandora's Box, in terms of interpreting HTML, downloading images, attachments or whatever. I sincerely doubt that is even the case for the major providers such as Outlook or Gmail. And yeah, per comments downthread, my Android Messages app has "read/unread" and that's really the only thing that "opening a text" changes. There's no additional execution or activation like opening or executing a file.


Replies

autoexec10/01/2024

> It used to be, on some mail readers, that "opening" an email message could unleash Pandora's Box, in terms of interpreting HTML, downloading images, attachments or whatever.

That's still true for both email and text messages.

Just opening text messages can infect your phone too. In one case, iphone users didn't even have to open the message (https://www.bleepingcomputer.com/news/security/apple-zero-cl...).

There have been similar problems with outlook allowing unread email to infect a device (https://www.csoonline.com/article/3486789/microsoft-outlook-...)

It doesn't matter what the platform is, spam is toxic and should be handled carefully and as little as possible.

happymellon10/01/2024

Does RCS remove the read receipt?

Back in the day, some systems used to acknowledge the request for a read receipt by default giving them the ability to determine if a number was actively watched.

Hopefully everything has it disabled by default these days.

show 1 reply