3 ms·
Not if the bug happens only when the truncation happens at the "right" place. As far as we know, no other e-mail client truncates e-mails exactly like Gmail.
by pferde 7y ago
Not if the bug happens only when the truncation happens at the "right" place. As far as we know, no other e-mail client truncates e-mails exactly like Gmail.
- dTal 7y agoErm. I don't quite know how else to put this... what stops the malicious sender from sending an email "pre-truncated"? Emails are plain text underneath. Gmail's truncation contributes nothing that couldn't be accomplished on the sender side anyway.
- pferde 7y agoYou are right, it would probably be a long shot. I am basing this on some assumptions, such as that the truncation happens after Gmail's content sanitizing has already happened, not before. But even omitting the security aspect, such rude truncation is something I would have expected on some low-budget webmail app done as a high-school student's IT class project, not on a polished offering of a multi-billion company.
- jorangreef 7y agoNo, you are quite right about the security risk. It creates ambiguity, and ambiguity is just one step away from an exploit.