DMasti Network: Information Security Risk

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s400/google-default-image.security-risk.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s320/google-default-image.security-risk.jpg" width="320" /></a></div><div style="text-align: justify;">Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Google. <br /><br />By enabling this feature, Google made a mistake, now sender is able to track whether the user have opened the mail or not.<br /><br />An attacker with a unique image link (eg:www.breakthesecurity.com/123456.jpg) can easily determine when the recipient opened the mail.<br /><br />"Turning those images on means we’ll be more accurate when tracking unique opens."MailChimp, a bulk Mail service, said in their blog post.<br /><br />Sponsored Links<br />"GMail's new image caching doesn't occur until the user views the message, still provides read tracking." HD Moore, security researcher commented about this new feature in his tweet.<br /><br />You can disable this feature by choosing the option "Ask before showing" in the "image" section under the General tab in settings. However, it is still in question how many of users going to disable it, most of them don't bother.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Friday, December 13, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Gmail now automatically displays images, helps attacker to know when you open the mail

Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Goo...