3 ms·
Thunderbird supports not accessing remote content: https://support.mozilla.org/en-US/kb/remote-content-in-messages#w_what-is-remote-content-and-why-is-it-block
by jabot 9y ago
Thunderbird supports not accessing remote content:
https://support.mozilla.org/en-US/kb/remote-content-in-messages#w_what-is-remote-content-and-why-is-it-blocked https://support.mozilla.org/en-US/kb/remote-content-in-messa...
This seems to be a sufficient countermeasure against the kind of tracking in the article.
- craftyguy 9y agoAnyone know if mutt does this? I currently pipe HTML mails through w3m to read them, and I'm almost certain this technique is pulling remote content, so I would be interested if anyone has some tips on improving this setup. Avoiding HTML mails altogether is sadly not an option.
- dividuum 9y agoPut it in a sandbox without network access. https://github.com/projectatomic/bubblewrap https://github.com/projectatomic/bubblewrap might be worth looking at for that. It also has the added benefit of reducing the attack surface of running w3m on untrusted content.
- craftyguy 9y agoOh, that's an interesting idea! I currently use firejail quite a bit, but hadn't thought of using it to also kill network access for w3m's rendering of an html email. Thanks for the idea!
- discreditable 9y agoEven better, Thunderbird's Simple HTML view strips most HTML abuse from mail and keeps it formatted relatively nicely.