Hacker News Reader

Thunderbird supports not accessing remote content:

https://support.mozilla.org/en-US/kb/remote-content-in-messa...

This seems to be a sufficient countermeasure against the kind of tracking in the article.

Anyone know if mutt does this? I currently pipe HTML mails through w3m to read them, and I'm almost certain this technique is pulling remote content, so I would be interested if anyone has some tips on improving this setup. Avoiding HTML mails altogether is sadly not an option.

Put it in a sandbox without network access. https://github.com/projectatomic/bubblewrap might be worth looking at for that. It also has the added benefit of reducing the attack surface of running w3m on untrusted content.

Oh, that's an interesting idea! I currently use firejail quite a bit, but hadn't thought of using it to also kill network access for w3m's rendering of an html email. Thanks for the idea!

Even better, Thunderbird's Simple HTML view strips most HTML abuse from mail and keeps it formatted relatively nicely.

Reply on news.ycombinator.com