Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

1
vote
1answer
65 views

Access to email without antivirus [duplicate]

I am doing a test where we want to asses whether an email with a benign virus in it, exits a network. I need a means to receive the test emails I am sending from inside the network, without any ...
-1
votes
1answer
70 views

“FROM” mail spoofing [duplicate]

I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is myname@mycompany.com. So my ...
0
votes
0answers
21 views

Metadata and Adding Files

If a person had files they wish to add to a computer and had physical access to the computer could the docs or emails be added with false metadata to indicate the documents had been added at a ...
1
vote
2answers
110 views

How to encrypt data in email body sent by (offline) app and decrypt on server

I've build an (offline)app (HTML/JS). The app allows the user to write a report (event when he is offline). The data from the report is sent via the body of an email to the companies special email ...
1
vote
2answers
247 views

Is this some sort of scam or do I have stalker?

Sender: msmith11@mail.com Emails are from IP address:74.208.4.200 Emails are weekly. all text, no links, no images. Some Depict sexual fantasies in high detail directed to a female - which I am. ...
5
votes
1answer
794 views

Is it safe to email the contents of your .htaccess?

If you assume that you're not on HTTPS or that, at least, the security of your connection is compromised, is it safe to email someone the contents of your site's .htaccess file? I'm a novice in this ...
0
votes
2answers
91 views

How to know when to install a certificate?

How do you actually know when a certificate is issued that your system doesn't recognize, whether to trust it or not? When I was setting up Outlook for Gmail I got prompted to install the following ...
-1
votes
1answer
37 views

Signed E-Mail certificate invalid [closed]

I sent a valid signed e mail a few weeks ago. Now I reinstalled everything on my computer (including the OS). Is the certificate now invalid?
2
votes
1answer
100 views

Login on public Wi-Fi networks using HTTPS [duplicate]

Is it safe to log in to my e-mail account with my iPad's Safari through a public Wi-Fi network (let's suppose someone is eavesdropping the traffic) provided that the e-mail provider uses HTTPS?
2
votes
1answer
45 views

How do we 'initiate' mail exchange with PGP

I am totally new with PGP, and I would like to know how I can initiate a mail exchange with it. I created my public/private keys, and posted my private key on the MIT PGP Public Key Server. I can ...
1
vote
2answers
59 views

Is it possible to protect the emails and calendar in an Exchange server against own Exchange administrators?

We have our Exchange server in a remote site administered by an external provider. We would like to avoid the possibility of provider employees to access the email and calendar of critical accounts in ...
3
votes
3answers
1k views

I'm getting spam e-mail…from myself?

I noticed yesterday that I had received spam e-mail, but my own e-mail address was listed as the sender. Naturally, I changed my password. This is probably a spoof, but I don't know enough about ...
4
votes
1answer
104 views

Asking for Password After Email Validation?

I do not want to discuss the pros and cons of email validation, but want to know if there are any potential downsides (security and otherwise) to a user entering his password only after he has already ...
0
votes
2answers
47 views

Emailing spoofing

I've got 2 macs on a home network, as well as an iphone. I've got my own domain on Godaddy set up with an SPF record. I've changed the password on my account. But emails are being sent using my ...
4
votes
3answers
455 views

Storing credit card information for later manual processing

I am rebuilding a clients eCommerce site using Wordpress and WooCommerce as the framework. Their current eCommerce site takes the credit card information and stores it for later manual processing. To ...
5
votes
1answer
81 views

Should I have special emoticon handling for compliance, audit and logging?

I'm required to audit various communications (email, sms, messenger, social media) for keywords relating to financial data, HIPPA, and other PII. Is there any rational reason I should extend my ...
57
votes
3answers
6k views

Why do email programs block xml files?

A colleague sent a .xml file to me earlier today, which was blocked by Outlook. As we were discussing the workaround (put it in a .zip), we got to wondering why .xml files are blocked. My colleague ...
-1
votes
1answer
567 views

What is the difference between X-Received and Received in email-header? [closed]

Also how to calculate delay between sent and received?
2
votes
1answer
42 views

What is the point of sending an email informing a possible break in to the same account?

There are several email services, including Gmail that for some time now sends an email informing that someone logged in from a different device. An attacker, logging into that account would also ...
1
vote
0answers
108 views

What vulnerability is this malicious document attempting to exploit

CLARIFICATION: I changed the title as people were interpreting this as a request to help understand the code. I explain what the code is doing below (critiques on this analysis are welcome.) I am ...
7
votes
2answers
366 views

Is a mail secure if it's PGP-encrypted, but unsigned when sent with DKIM?

I run my own mail server and would like to use different addresses on the same domain. If I were to sign mails from those addresses, I'd have to generate new PGP keys for each and every one of them. ...
3
votes
1answer
120 views

mailto email headers trace IP

So I'm working on a defamation case. So I will make a little overview of what is going on. The person we are trying to trace is using a site like kijiji. Tomorrow I am heading to the so said kijiji ...
1
vote
1answer
154 views

how to track IP address from which mail has been sent?

I am from India. I have get few mails from some random Gmail ID. How to get the information from which IP address it has been sent ?
6
votes
1answer
676 views

Gmail lets me use my old password

My university's email works through Gmail and I can log on to it either through my uni's website or in Gmail. I recently changed my password and I use it to log in to the schools secure WiFi, school ...
3
votes
2answers
186 views

How to give “Forgot password” option for a password encrypted file?

I have created a utility that encrypts a file (.txt, .dox, so on...). The utility asks for a password from user at the time of file encryption. Problem Suppose a user has created 1000 encrypted ...
0
votes
1answer
45 views

What information should be scrubbed before posting email headers in public?

To figure out a problem, I need to post mail headers on a public forum, I read What information can be gained from an Email Header? but I'm not sure what information can identify me personally from ...
5
votes
2answers
236 views

Is it possible to infect an e-mail by accident?

Sometimes, my friends send me e-mails. I know that they don't care that much about computer security (while I care). I know that they don't know how to create an infected e-mail (no reason for doing ...
2
votes
1answer
49 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
2
votes
2answers
111 views

TLS capable SMTP store-and-forward server — does it have to store private keys?

I know that email is inherently insecure anyway, but considering that pretty much everyone that I send email to is using a large, somewhat-trusted cloud provider, (hint, starts with G) I would expect ...
-1
votes
1answer
71 views

Server is Sending Spam

I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses). How can I determine what's compromised? Does the attacker know my SSH password? ...
1
vote
1answer
55 views

What is a viable time-frame for links that expire? [closed]

Links that expire can be found anywhere from Email Verification to Password Reset procedures, I understand in most cases this is considered "security theater", but wanted to know what a viable ...
0
votes
1answer
228 views

Correct way of dealing with spam via impersonation

I've been having a recurring problem at work: My boss's contacts keep receiving emails with links sent by a fake adress. The adress always has my boss's name + a different domain name every time. ...
0
votes
1answer
50 views

User account password encyption by web based emails service providers?

Do web based email providers like Gmail, hotmail encrypt user account passwords when saving them to their database? If they do, why does account information get leaked after a hack?
1
vote
2answers
104 views

Email used to log in but doesn't have to be unique. Issues?

I've moved onto a project where they are implementing a system whereby a user's email address can be used multiple times by different people - i.e. users can sign up as many times as they want with an ...
1
vote
2answers
205 views

A secure alternative for e-mail

I am looking for an alternative for my current e-mail provider (gmail). I would like to gain back a little bit more "privacy" on the internet. I would like the following things: The e-mails I send ...
-4
votes
1answer
167 views

What is the purpose of viagra spam? [closed]

We all have gotten them: The reflection of your size will stay forever in her eyes. Bigger pen!s gives you a bunch of benefits! I have girls that ring me for sex now, its amazing! Judging by ...
5
votes
5answers
2k views

Security of faxes vs emails

Background The other day a friend who works in healthcare asked me which method of communication was more secure, faxing or email. He qualified his question by saying that his office faxes patient ...
0
votes
1answer
68 views

Is it possible to forge email info in header?

I recently received an email from a guy making me a job offer for a big government company and stating that he works there. However instead of using the domain of the company, he is using GMail. ...
5
votes
1answer
2k views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
0
votes
1answer
47 views

Changing senders, same spam messages

We have a situation at work regarding to our mail filtering appliance and I was hoping that you could give us some insight on how to approach this issue. We've been receiving spam emails with the ...
3
votes
2answers
808 views

PayPal “Confirm your email address” spam emails? I got 3 different mails within 10 hours

I got 2 emails within 12 hours containing the following: Confirm your email address Hello [Name] [Name], Confirm your email address now to let us know it really belongs to you. Once ...
4
votes
1answer
62 views

Implemented DMARC, getting reports of canonical.com sending spam - has Ubuntuone been hacked?

I have implemented DMARC on my mailserver and for the first time I'm getting reports of an IP address trying to fake me as the email sender: >record> >row> >source_ip>91.189.90.7>/source_ip> ...
-1
votes
3answers
110 views

Are 21 characters enough to restore a PGP key?

The german e-mail hoster web.de offers PGP encryption with Mailvelope now. To transfer your private key to another browser, you can use a 21 characters long recover key. How does this affect the ...
0
votes
1answer
62 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
-1
votes
1answer
473 views

SQLMAP --OS-SHELL error [closed]

root@kali:~# sqlmap -u http://www.a***********.com/info.php?id=2 --os-shell _ _ _| |_____ _ {1.0-dev-nongit-20150907} | -| . | | | .'| . | || |||||,| | || |_| ...
0
votes
1answer
64 views

How much information, at maximum, can a phisher/scammer obtain?

My iPhone was recently stolen and since then I've been receiving messages and emails saying that 'a sound was played on your iPhone' or 'your iPhone was found. Visit here to confirm your location'. ...
3
votes
2answers
140 views

activate user account through email

I see a lot of people say to hash for the token on email verification when dealing with member registration. I am wondering, if the email token is only to activate the account and nothing else, ...
1
vote
2answers
102 views

How to prevent phishing mails from being successful? [duplicate]

I'd like to know what the best methods are to prevent success of phising mails. This question contains the following subquestions: What are the best ways to determine incoming phising mails (on a ...
6
votes
1answer
1k views

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
-3
votes
1answer
106 views

How to sell a new idea – “100% secure communication”, feedback wanted [closed]

I have thought of an idea (new product) to have 100% secure communication between 2 parties and would like your feedback/ideas on how to sell it. Oh, before you start that there is no such thing as ...