3 ms·
An IMAP client somewhere could poll the 'read' state of message 0x12345678 instead, alerting the owner when the message turns 'read'. However, that client would
by limmeau 15y ago
An IMAP client somewhere could poll the 'read' state of message 0x12345678 instead, alerting the owner when the message turns 'read'. However, that client would have to have access to the Gmail box...
- troels 15y agoYep, but it couldn't collect the IP of the attacker.
- pyre 15y agoYou're assuming that the attacked hasn't hidden his IP (i.e. Tor) or is in a country that will actually give a crap (i.e. not Russia/China).
- wladimir 15y agoBut would an attacker read a message marked as unread? A careful attacker would know that this alerts the owner of the mailbox, as he can't remember opening the message. His canary is a mail that has already been opened, so the attacker assumes he can look at it harmlessly.