Save this to your desktop as “index.html”. If you use Text Edit, it’ll throw up a warning and try to change the extension to “txt”. Click “Use .html”.

By appending just a few lines of HTML and CSS code, researcher Louis Dion-Marcil showed how an external sender could hide the very warning from an email message.