Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities

[Daniel Veditz <dveditz () cruzio com>]

Nick Boyce wrote:
> Hmmm. I didn't realise the "Show Images" setting got stored, and I
> don't think that's the best strategy from a privacy point of view.

It surprised me, too. The threat model was spammers trying to verify
live addresses, and in that model loading a webbug multiple times is no
worse than loading it once. Mail usage spying like the "ReadNotify"
service was apparently not considered.

> I take it you mean "stored for that one message",

Yes, just that one message.