41–48 of 48 posts
It's not secure, it's not accessible and I fail to see how it protects privacy of defeat surveillance in any way, actually all your emails are now belonging to another third party, namely fade.li.
oh and the emails and not even self destructing.
Use openGPG instead.
Earlier quoted context omitted.
You can't easily stop wget. It's impossible to distinguish between Firefox accessing the image, and wget / curl / whatever accessing the image with Firefox's user agent string (and changing the user agent string in these utilities is just a simple flag)
You could get clever by testing on the server whether the other headers are consistent with the User Agent (e.g. Accept). But yeah, ultimately it's a losing game because you're trusting the client not to be compromised.
Those headers can vary from machine to machine even when using the same browser. So you'd have a huge amount of testing, plus the big risk of braking legitimate requests. I just cant see how you could pull that off successfully.
> But yeah, ultimately it's a losing game because you're trusting the client not to be compromised.
Totally. Even if your solution did work, it's trivial to break again as you just add the appropriate headers to wget / curl as well as changing the user agent string.
I did not realize you could setup a MX record for a wild-card subdomain. It would seem like there are lots of applications for that setup - how come it's not something I've seen dome more?
As far as ideas, I'm actually thinking the complete opposite. Going on record - like an 3rd party service that proves that you sent an email to a person at a certain date and time in case of a later dispute. e.g.
youremail@google.com.prove.it
Earlier quoted context omitted.
neat tool: chrome developer tools > network > rightclick a resource > copy as Curl > paste on command line allows you to replay a request, complete with all cookies and the exact same headers. yeah, aware this isn't what's wanted here, single request image etc etc ... but relevant.
OH! You wonderful wonderful man!
1) Open email in gmail (do not press display images) 2) Options on the right "Show Original" 3) Copy the URL that goes like: http://content.fade.li/selcouth/.. . to a new tab 4) Save image as 5) ... 6) Profit! For added fun, somebody please go and register unfade.li, if you forward a mail there, it OCR scans the image and sends you back the text. P.S. sending email as images is one of the most stupid ideas that seems…