4 ms·
That view of the browser is what I want to have. It blows my mind that we still have to tell people “don’t click links in your email” because it’s still possibl
by brightball 7y ago
That view of the browser is what I want to have. It blows my mind that we still have to tell people “don’t click links in your email” because it’s still possible for something terrible to happen if they do.
- u801e 7y agoThe real question is why should links in an email message be clickable? Restricting email messages to plain text would make it much more difficult for attacks like that to succeed.
- dgellow 7y ago... and make emails completely useless.
- dijksterhuis 7y agoEver head of copy & paste? Won’t make them “useless”, maybe inconvenient for non-security minded individuals.
- dgellow 7y agoif You make emails inconvenient for non-security minded people by removing something as important as links, you will push mainstream users to move away of the medium (because other way to communicate will definitely support links and not force people to copy paste), which doesn’t help or solve anything.
- BlueTemplar 7y agoURLs are plain text... Can also easily be clickable, depending on your e-mail software.
- u801e 7y agoThey are, but some email clients will display text that doesn't match the original URL. Hence the advice to hover the mouse pointer over the link and tread the original URL text that way.
- BlueTemplar 7y agoIf you use plain text mode they won't be able to. Hence the advice to disable HTML in e-mails.
- moviuro 7y ago> for something terrible to happen if they [click links in their email]. There are very few RCEs now on modern browser (they still exist[0,1], though). The main threat is phishing, because users are gullible (and should be educated). [0] https://www.mozilla.org/en-US/security/advisories/mfsa2019-13/#CVE-2019-9814 https://www.mozilla.org/en-US/security/advisories/mfsa2019-1... [1] https://objective-see.com/blog/blog_0x43.html https://objective-see.com/blog/blog_0x43.html And: https://news.ycombinator.com/item?id=20283922 https://news.ycombinator.com/item?id=20283922
- kevin_thibedeau 7y agoYou don't need to exploit a browser when Adobe still can't fix the holes in Reader and corporate users are still heavily dependent on Outlook.