Live data from Hacker News

Zero click vulnerability in Apple’s macOS Mail

mikko-kenttala.medium.com

21–30 of 269 posts

Re: Zero click vulnerability in Apple’s macOS Mail

#21
post #9

Earlier quoted context omitted.

It’s my main email client, what’s wrong with it?

What’s right with it? I tried it a few times and always returned to web-based clients (on desktop) and third-party apps (outlook, gmail, protonmail) on iOS.

I find it works very well, so basically everything seems right. Use it for nine accounts concurrently. Rarely have any issues.

Re: Zero click vulnerability in Apple’s macOS Mail

#22
post #9

Earlier quoted context omitted.

It’s my main email client, what’s wrong with it?

What’s right with it? I tried it a few times and always returned to web-based clients (on desktop) and third-party apps (outlook, gmail, protonmail) on iOS.

So what's wrong with it?

Re: Zero click vulnerability in Apple’s macOS Mail

#23
post #9

Earlier quoted context omitted.

It’s my main email client, what’s wrong with it?

What’s right with it? I tried it a few times and always returned to web-based clients (on desktop) and third-party apps (outlook, gmail, protonmail) on iOS.

What web-based client will allow you to read email without an Internet connection in Safari?

What marginal advantage does a third-party iOS client provide, that outweighs the risks of installing another app that is going to spy on me, have weaker integration with the OS and force me to relearn every new UI design language they come up with that in no way resembles the rest of the OS or its function and behavior?

Re: Zero click vulnerability in Apple’s macOS Mail

#24
post #3

That's gonna be devastating to the three people who use Mail.app

A new Mac comes with something like 30 apps in the bar. I clicked and disabled every single one of them except Finder and used Safari to download another browser. If it was any other manufacturer, this mess would be quickly denounced by reviewers as crapware. But because it is by Apple, it is not a problem at all.

I am not expecting this to fix by itself. Maybe some major review blogs should first not parrot how magical the whole thing is and change the tone as such things are not only annoying, but also a security risk even if you don't actively use the app. I am not an expert on development for MacOS, but I would be surprised if there is no way to trigger the mail app from another app or a link. I just hope the bug is not exportable this way.

Re: Zero click vulnerability in Apple’s macOS Mail

#25
post #6

Earlier quoted context omitted.

That's not what the statistics say: https://emailclientmarketshare.com

Am I the only one using outlook and loving it?

No - I still don't like it myself but they've made some pretty great strides in feature parity and have excellent integration if you're a Teams shop.

Re: Zero click vulnerability in Apple’s macOS Mail

#27
post #16
post #6

Earlier quoted context omitted.

That's not what the statistics say: https://emailclientmarketshare.com

Wow, Mail.app has more market share than Outlook. I'm pleasantly surprised. Ditto for GMail only having ~30%. Although, > Since determining the client in which an email is opened requires images to be displayed, the data for some email clients and mobile devices might be over- or under-represented due to automatic image blocking. Outlook doesn't display external images by default, while Mail.app does, so....

Also, I assume there's a different demographic that uses Mail vs Outlook. Those different demographics will receive different types of email, which may or may not be represented differently by companies who use Litmus tracking which is how this data is being collected.

Re: Zero click vulnerability in Apple’s macOS Mail

#28
post #16
post #6

Earlier quoted context omitted.

That's not what the statistics say: https://emailclientmarketshare.com

Wow, Mail.app has more market share than Outlook. I'm pleasantly surprised. Ditto for GMail only having ~30%. Although, > Since determining the client in which an email is opened requires images to be displayed, the data for some email clients and mobile devices might be over- or under-represented due to automatic image blocking. Outlook doesn't display external images by default, while Mail.app does, so....

right, neither does Evolution or Thunderbird. It's crazy that Mail.app does this.

Re: Zero click vulnerability in Apple’s macOS Mail

#29
post #3

That's gonna be devastating to the three people who use Mail.app

;_; one of us. one of us. Whats a good alternative for macos these days? I loved sparrow back in the day, before I got acquired and killed by google.

Mailmate is pretty awesome
Post reply on HN