3 ms·
So I'm assuming that the image is a hyperlink, and that this link contains the "data:text/html" webpage designed to trick users. So couldn't Google flag emails
by kogepathic 10y ago
So I'm assuming that the image is a hyperlink, and that this link contains the "data:text/html" webpage designed to trick users.
So couldn't Google flag emails which have links to "data:text/html" as suspicious?
Even if it came from a known contact, I can't imagine normal people emailing around links with "data:text/html" as the link target.
- cprecioso 10y agoCould be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html The attacker's website would only be visible for half a second, and users are used to the dance of redirects before a login page, so this makes it not suspicious
- kogepathic 10y ago> Could be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html Sure, I agree it's a game of cat and mouse. But GMail's spam filter in my experience is pretty good, so if Google started flagging these messages as spam based on the link contents/website it would help reduce the success rate.