Hacker News new | past | comments | ask | show | jobs | submit login

I accept that other people's use cases and preferences differ.

But given the carnage that HTML e-mail being the normal has caused in phishing and other privacy invading manners, I question whether the benefits of those use cases and preferences out-weight the detriments of the practice. Just ask John Podesta:

> SecureWorks concluded Fancy Bear had sent Podesta an email on March 19, 2016, that had the appearance of a Google security alert, but actually contained a misleading link—a strategy known as spear-phishing. (This tactic has also been used by hackers to break into the accounts of other notable persons, such as Colin Powell). The link[10]—which used the URL shortening service Bitly—brought Podesta to a fake log-in page where he entered his Gmail credentials.[1][9][11][12] The email was initially sent to the IT department as it was suspected of being a fake but was described as "legitimate" in an e-mail sent by a department employee, who later said he meant to write "illegitimate".[13][14][15]

* https://en.wikipedia.org/wiki/Podesta_emails

Or countless others who have been phished.




Replying to myself with an example of brain damage HTML e-mail, the contents of a message body:

> <html><head>

> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">

> <meta http-equiv="Refresh" content="0; URL=https://c.na39.content.force.com/servlet/servlet.EmailAttach... [...] ">

> </head><body>

> <div>Attachment not opening? Click this link: <a href="https://c.na39.content.force.com/servlet/servlet.EmailAttach... [...] ">ColorAnalysisWithOMA300.pdf</a>

> </div></html>

From a post made today:

* https://old.reddit.com/r/sysadmin/comments/ch83sz/




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: