cookies/spyware in email?

Discussion in 'General Mac Discussion' started by goodtimes5, Jul 19, 2004.

  1. goodtimes5 macrumors 6502a


    Apr 4, 2004
    Bay Area
    So I sent an email to a fellow Mac user, and they responded by complaining my email was chock full of cookies and spyware that he had to delete. I wasn't able to ask him how he checked it, but I suspect some built-in email thing. But yeah, it was just a plain text email, so I don't see how anything other than words could have been sent. And spyware on a Mac? What the.
  2. Finiksa macrumors 6502a


    Feb 23, 2003
    If it was a plain text email then there is no way for it to contain embedded cookies etc. you could have sent attachments containing cookies or something objectionable. It sounds like this person is spouting a load of BS, ask them to explain exactly what the email contained that they had a problem with.

    Nope no real Mac spyware exists anyway
  3. Horrortaxi macrumors 68020


    Jul 6, 2003
    Los Angeles
    Some people are idiots. And some of THEM think they are very very smart, thus elevating them to the position of ***** Idiot. I think the person in question here is one of those.

    Damn, I have to remember not to check MacRumors after drinking. Apologies to the offended.

    Let's just say that plain text doesn't send anything extra and say that your buddy is full of crap.
  4. slughead macrumors 68040


    Apr 28, 2004
    uhm I don't know about e-mail, but with HTML you can have cookies without anything special.. just put this in the header of a page:

    Set Cookie: poop=smelly

    and now whenever they visit your domain you can find out that their computer thinks poop is smelly.

    I know e-mail headers work much the same way, the difference being the client.

    So yes, plain text can contain 'cookies', however I've never heard about an e-mail client interoperating them them (which is the only way cookies can function). After all, cookies are just plain text.

    As far as spyware, if you're not using a fuctarded e-mail client the only malicious thing they can use are images that are generated by files on http servers (which can get your IP and stuff). If you see an image with a weird ending (like .php), it's probably there so they can get info from you and then dump the image so you don't have to actually see any html for them to get data from your client. For instance, if you wanted to keep people from using your images on another page, you could throw all your images through a php file that would grab the clients' referrer before sending the data, and check it against your site.

    Or, if you were some assclown that wanted to find out if an e-mail is valid, you could put an < img src="http://evil.domain/image.php?" > in an e-mail message (the image.php being a data-mining script).

Share This Page