Live data from Hacker News

Gmail blows up e-mail marketing by caching all images on Google servers

arstechnica.com

301–310 of 322 posts

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#301
post #231
post #44

Earlier quoted context omitted.

Easy: Make the "Dear " part of the email an image. Boom, deduplication fooled. (Also, they don't currently seem to do anything like you're suggesting.)

And Google could just mark any mail from sources who pull these shenanigans as spam

Yup. Though I suspect my university's alumni newsletter also has tracking images in it. I haven't checked, but if I were them I'd use a tracking image.

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#302
post #44

Earlier quoted context omitted.

Google could retrieve and cache a random sample of the images and hash them. Then they could note which image links go to the same images. And they could identify image links by noting that a bunch of emails have the same structure except for one image link that's different for every recipient. So I think they actually could take a pretty good stab a deduping images with unique tracking URLs. It might not be perfect,…

Easy: Make the "Dear " part of the email an image. Boom, deduplication fooled. (Also, they don't currently seem to do anything like you're suggesting.)

they dont have to even edit the image. they can just put a tracking id in the image metadata.

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#303

So how does this affect various email template applications such as Tout or Hubspot's Signals? IIRC Tout drops a pixel in each email and uses that as a primary tracking source for opens/CTRs etc...

I'm pretty sure this kills Tout's tracking when sending to Gmail users.

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#306

Earlier quoted context omitted.

They're just acting as an email client. Alice sends email to Bob, Bob is granted rights to fetch and view images. Bob uses gmail, so he passes the rights onto google to do part of that serverside.

I'm not a lawyer, but I don't think copyright law allows for Bob to pass on that right.

He certainly passed on a significant portion of the rights or that server wouldn't be authorized to receive and permanently store the emails in the first place.

Do you think copyright law disallows running your desktop in the cloud?

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#307
post #12

> E-mail marketers will no longer be able to get any information from images—they will see a single request from Google, which will then be used to send the image out to all Gmail users. Unless you click on a link, marketers will have no idea the e-mail has been seen. Absurdly wrong, marketers already use a unique image URL for each email recipient, and Google has no way to know that all of those point to the same im…

A few years back I shared office space with an "email marketer", and even then he would tell me that each image URL contained a hash as part of the file name. This hash is linked to the email address. How would they be able to prevent that? Even if Google pre-fetches it, it still would (possibly harmfully) confirm they had saw it. Even if they didn't.

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#308
post #116
post #90

Earlier quoted context omitted.

There is ONE way: fetch every single image right away regardless of whether the email is even valid. And then don't store the cached version if there is no valid email. Otherwise store it and display to the user. Since every result will be a positive - false or not - no information is revealed to the marketer AND the images are displayed.

There is ONE way: fetch every single image right away regardless of whether the email is even valid. And then don't store the cached version if there is no valid email. Otherwise store it and display to the user. Sure, in theory that works. In practice, you make an easy may to do a Denial of Service attack against Google or innocent third parties so it in actuality would never work. Send a million emails to Gmail acc…

But this is Google. They already want and try to load every url in existence. DoS attacks based on flooding actual content are largely irrelevant to them.

Attacks on third parties are trickier, but you can do the same sort of thing today; how often is this tactic used already? And can't you download 404 messages yourself for cheaper than 1k?

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#309
post #12

> E-mail marketers will no longer be able to get any information from images—they will see a single request from Google, which will then be used to send the image out to all Gmail users. Unless you click on a link, marketers will have no idea the e-mail has been seen. Absurdly wrong, marketers already use a unique image URL for each email recipient, and Google has no way to know that all of those point to the same im…

> They'll see one request from Google per successful delivery to an inbox

But if the images are pre-cached before the user opens it, there is still no way of knowing the E-mail was read.

Unless the image is cached upon opening, which is a bit counter-intuitive.

Re: Gmail blows up e-mail marketing by caching all images on Google servers

#310
post #257
post #12

> E-mail marketers will no longer be able to get any information from images—they will see a single request from Google, which will then be used to send the image out to all Gmail users. Unless you click on a link, marketers will have no idea the e-mail has been seen. Absurdly wrong, marketers already use a unique image URL for each email recipient, and Google has no way to know that all of those point to the same im…

> and Google has no way to know that all of those point to the same image. They could do content hash-based caching rather than URL-based caching. It would be more private, as the email senders would have to generate a unique image for each recipient.

It's impossible to know if the content for a different URL is the same without fetching it first, your point won't work.
Post reply on HN