Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

1
vote
1answer
514 views

How can I allow local pop3 but enforce remote pop3s on my ubuntu/postfix/dovecot OS/MTA/MDA

I would like to allow local clients to access email via any of pop3, pop3s, imap, or imaps if they so choose but restrict remote clients to pop3s and imaps only, simililarly to how I already do for ...
1
vote
1answer
111 views

How is the username and password captured on this mobile device?

I have a Motorola phone, and I am concerned about my privacy after reading this article : http://www.beneaththewaves.net/Projects/Motorola_Is_Listening.html The poster says: For both of these ...
0
votes
2answers
2k views

How hard is it to hack into a webmail account with a strong 8 character password?

Assume the hacker starts with only your email address and he has high incentive to gain access. UPDATE: Also assume the password is unique (never used elsewhere) and it is NOT a guessable word like ...
0
votes
2answers
439 views

Can a man engaged in phishing be prosecuted if I know his IP?

My familiar received some emails from a man she meets at dating site. The man sent her his photos by email. In them he made some attempts that looked like phishing so I decided to lookup more ...
0
votes
2answers
238 views

“You have new mail” message

I received a message from Google saying someone entered my email account. I confirmed that there were an access from an IP in another country. I have noticed "You have new mail" message when I open ...
0
votes
2answers
1k views

Keyloggers - Ports used by keyloggers

According to this article, keyloggers usually make use of the FTP ports and email ports: http://rbmikrotik.blogspot.com/2011/07/how-to-block-port-frequently-keylogger.html My question is, can a ...
0
votes
5answers
2k views

How can I prevent forwarding a manipulated email?

How can I prevent someone from modifying the contents of an email they received and then forwarding it to others? Some employees cheat managers by changing the content of emails and forwarding the ...
0
votes
3answers
310 views

What is the most reliable way to transfer emails without specific recipient support?

Many suggestions on transfering emails securely can be found in this answer. But many of them (e.g. PGP) need support from recipient. I want to provide SMTP email server that will route emails of it's ...
0
votes
2answers
425 views

Best practice for sending IP Addresses

IP Addresses are pretty common around the internet so they're often easily found in plain text. However, let's say there's a number of IP addresses configured on a server to allow access through a ...
0
votes
1answer
63 views

Avast attempts to connect to the Internet when I try to download email [closed]

The file AVAST (Software\Avast\AvastSvc.exe) tries to connect when I check my email. When I forbid access to the internet for AvastSvc.exe, I can't connect to POP3 & SMTP. I'm not sure where all ...
0
votes
2answers
107 views

LAMP MailServer without SSL… so what's the problem?

I want to set up a MailServer on Ubuntu for my website, and access the email from my POP3 client without enabling SSL encryption (I suppose the SSL is used to encrypt the password?). My questions ...
0
votes
1answer
568 views

How dangerous is checking email on open Wi-Fi network

How risky is it to check my email on my smartphone on an open Wi-Fi network (i.e. Starbucks or Old Navy)? Is this only risky if someone is snooping? Do they have to be there, or can they leave a ...
0
votes
2answers
194 views

Is this a case of simple email spoofing or has my email account been compromised?

I just arrived home and when got to my computer I checked my mail box and it was with a message coming from my own email address that was sent almost at the same time I got home. I promptly ...
0
votes
4answers
587 views

Is end to end email encryption possible without unique domain/subdomain for each user?

Lets say Alice@gmail.com wants to send message to Bob@secureMail.com Alice <--> gmail.com <--> secureMail.com <--> Bob We know gmail.com can read the unencrypted message. Is it possible for ...
0
votes
3answers
336 views

Petraeus scandal - what would have been a better way to communicate electronically [closed]

Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
0
votes
3answers
178 views

What stopping someone from offering distributed and encrypted email? Just like Bitcoins

Basically Email service that is ran over a network, so it's not owned by any one entity. Everyone can use it and send email to someone else. All messages travel through a web of interconnected ...
0
votes
1answer
186 views

How is PKI used to encrypt an e-mail for multiple recipients?

My understanding is that when an e-mail is encrypted and sent to a recipient, the recipient's public key is used to encrypt the e-mail, and then only the recipient can decrypt it with their private ...
0
votes
3answers
342 views

Girlfriend just sent Personal info over email

My GF just hit me up and told me she just sent some of her personal info over an email. She was trying to send her folks some documents.I guess the documents had some sensitive info on them Like her ...
0
votes
2answers
658 views

How do fake emailers work?

Our University recently had a case where some notorious fellows used a fake emailing service to send an email to all students on behalf of the administration. Although most good email services (like ...
0
votes
2answers
51 views

What is the purpose of this “secure mail link open in browser”

I got an email that "supposedly" was secure. It had a link which said that to get secure message follow this link. They could have verified it was me by asking my bank or my smart card to ...
0
votes
1answer
135 views

Sites sending email using my email address

Today I was looking through my spam folder and noticed an email: The sender was myself, assume my email is xxx@gmail.com, on the from section it says xxx@gmail.com via clicktheprofits.com Does ...
0
votes
1answer
64 views

How much information, at maximum, can a phisher/scammer obtain?

My iPhone was recently stolen and since then I've been receiving messages and emails saying that 'a sound was played on your iPhone' or 'your iPhone was found. Visit here to confirm your location'. ...
0
votes
2answers
125 views

Could someone stop another from accessing their own online account?

Suppose Alice isn't able to break into Bob's email account, but Alice can still do damage to Bob (a VIP) if she can stop him from being able to use his own email (or any other online) account to send ...
0
votes
2answers
888 views

Gmail spam from contacts. How does it work?

I don't know why it seems IMPOSSIBLE to find a blog or any security expert explaining the procedure of how this 'hack' works. My wife is receiving emails from people she's emailed through Gmail ...
0
votes
2answers
184 views

Is sending authorizing links through e-mail a vulnerability?

I am not sure if my wording is right, but if I attach a unique token inside email links which will authorize the user if clicked, would you consider this a vulnerability? Password-reset partly ...
0
votes
1answer
85 views

Certificate for Email Encryption and signing

I don't understand the flow of Digital Certificate with Email Encryption and Signing. For Example, There is 2 users, Sender A and Receiver B. Is Certificate required to encryption to A or just ...
0
votes
2answers
222 views

What was the Lavabit's backdoors to their customers' e-mails? [closed]

There has been some talk about the Lavabit's case. New info was published today, but not important. I'd like to know how Lavabit worked. First I thought they just did something with OpenPGP. Then I ...
0
votes
2answers
54 views

Using PGP in emails - is there to find the key?

Suppose both the receiver and sender use PGP. Suppose someone send from the sender an email and sent it to the receiver. Now he gets the content of the email at the receiver. Can he know now the keys ...
0
votes
1answer
66 views

How can I test my spamfilter under real world conditions?

We are currently planning to migrate our outsourced mail solution to our own servers. The last thing we need to test is the spam filter. We are going to use a cloud based spam and anti virus filter ...
0
votes
2answers
91 views

How to know when to install a certificate?

How do you actually know when a certificate is issued that your system doesn't recognize, whether to trust it or not? When I was setting up Outlook for Gmail I got prompted to install the following ...
0
votes
2answers
556 views

How can I stop an account I don't control from sending spam email in my name to my contacts?

Recently I received an email from a friend with "My" email to them attached. The email "I" sent them was obviously spam, one of those "You have to see this..." emails. The email had been sent to ...
0
votes
1answer
160 views

PHP: Save e-mail address hashed or plain [duplicate]

I've been wondering about something, is it more secure to store an encrypted (hashed with password_hash) email address in the database, or just as plain text? I've google'd this matter and saw that ...
0
votes
2answers
78 views

Attaching the same file to two separate email, does it compromise security of the “message”

When using (Thunderbird and) GnuPG to send a PGP/MIME message to two separate recipients, with the text body different in both messages, but the same file attached to both of them, does this give an ...
0
votes
2answers
227 views

What kind of information can be found from email?

When an average person sees an email, he can see only part of an information enclosed in the mail. To see full information one can look at the source of an email, which shows more. Example of an email ...
0
votes
1answer
366 views

What is the mechanism for this user impersonation?

I'm trying to understand how this user impersonation might have taken place. Here's the scenario: Our controller got a call from our bank this morning about a suspicious wire transfer request. After ...
0
votes
2answers
46 views

How likely would /var/mail be encrypted in a paid host? [closed]

I pay for a very basic web hosting plan, which includes a personal email address. Would the sysadmin of said host be able to read the content of my messages? How likely would my personal mail folder ...
0
votes
1answer
87 views

Can one be infected just by reading an e-mail [duplicate]

I have heard several people say that you shouldn't even open e-mails that look suspicious, as you might be infected by a virus of some kind. Is there any validity to this? I suppose that some e-mails ...
0
votes
2answers
588 views

Metadata-free Email: How can SENDER directly, anonymously, and securely ask RECIPIENT’s mail provider to deliver a metadata-free email?

If I want to send emails to friends who use Google, Yahoo, AOL, etc., how can I currently use my local email client to send a metadata-free* email to them? E.g., is it possible to bypass my own mail ...
0
votes
1answer
213 views

Email hacker, what to do now?

Throughout the past 2 years; I have received email messages (about 6 or 7 cumulative) in which I responded to about 3. Which were personalized messages from a series of 3 email addresses. Nothing ...
0
votes
2answers
334 views

Danger in opening spam emails on Ubuntu operating system [closed]

Some emails are suspected to be viruses; Because of that, the email service store categorizes them as spam. Or some pages are suspected to be viruses, and new browsers classify them as harmful pages. ...
0
votes
4answers
8k views

How to trace email?

Is there any tool to trace all emails? I need to trace ip address and location of sender address.I also need to identify emails from fake address.
0
votes
2answers
752 views

Whether PGP is send over MIME?

If I am using PGP to encrypt mails whther it is send as a MIME (Multipurpose Internet Mail Extensions) message, and S/MIME and PGP are used for providing email security. When I send PGP message ...
0
votes
2answers
65 views

Is there a way to use public mail and not to enable the provider to see its content?

I'm looking for a way to use the common public emails such as Google and Yahoo and to prevent them from reading the content of the emails either by application that scans the emails and offer ads or ...
0
votes
1answer
56 views

Where can emails be sniffed from? [duplicate]

I understand that you should not send private information in emails due, in part, to the fact that this traffic is usually unencrypted and can therefore be sniffed while in transit. Where would a ...
0
votes
1answer
38 views

How do country's block politically charged spam? [closed]

I have a friend who is returning to China shortly, and I wanted to stay in touch with him so I got his email address. I was wondering what precautions does China (or any other dictatorial regimes for ...
0
votes
2answers
47 views

Emailing spoofing

I've got 2 macs on a home network, as well as an iphone. I've got my own domain on Godaddy set up with an SPF record. I've changed the password on my account. But emails are being sent using my ...
0
votes
1answer
68 views

Is it possible to forge email info in header?

I recently received an email from a guy making me a job offer for a big government company and stating that he works there. However instead of using the domain of the company, he is using GMail. ...
0
votes
1answer
62 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
0
votes
1answer
42 views

Under what circumstance might your email not make to your intended recipient? [closed]

I'm asking because it's one thing to eavesdrop on someone's email, but it's another thing to prevent your email from getting to your recipient. For example, I sent an email to a colleague and he and I ...
0
votes
2answers
62 views

Is there a way to attack STARTTLS + certificate pinning probed from multiple places?

I just had this discussion on IRC and I have to admit I did not understand why other users were not convinced this would be enough... Let's say I would like to protect e-mails sent out from my ...