Related to email protocols, clients, servers, content, and message format.
4
votes
3answers
147 views
Allow a PA to see a director's emails, but keep some emails private
We have a problem with email potentially being viewed by directors PAs, which we need to protect, the situation is as follows:
Director A wants to send an email to Director B, both director A and ...
4
votes
2answers
98 views
Is DKIM needed for emails encrypted with OpenPGP?
DKIM seems to prove that a message came from where it claims to be from. However, OpenPGP encrypts the entire email and signs it which obviously proves it also came from the person it says it did.
...
3
votes
2answers
133 views
What are the security or privacy issues with allowing users to forward email from our Google Apps account to their personal Gmail?
But we have a new employee that would rather all his email in one inbox. I know he can forward the mail to his personal account, send mail using an alias so that it looks like it is coming from the ...
2
votes
2answers
485 views
Google Mail alert message. Hacker from China
I have had a red warning box on top of the page when I access GMail. It says that there have been three attacks from China:
IP Address: 117.70.121.33
Location: Xuancheng, Anhui, China
and ...
1
vote
2answers
92 views
Activesync: If I disable or rename the AD account does that mean the phone won't be wiped?
Suppose an Activesync phone needs to be wiped because it was lost, stolen, or it was an employee termination.
If we disable the account prior to wiping the device (or the device receiving the wipe ...
-1
votes
1answer
1k views
Why Gmail logs you out automatically? [closed]
Last few days I have been auto logged out of Gmail. I have not been using any other google related websites on same browser, so there is no chance that I may have logged out from different service.
...
0
votes
0answers
23 views
Spoof email, spam and link bait? [duplicate]
Possible Duplicate:
What malicious things can happen when clicking on links in email?
Recently, I have been receiving a couple of SPAM emails seemingly from one of my friends. The email ...
0
votes
0answers
135 views
Roundcube login only looks at first 8 characters of password entered? [closed]
I have two hosting accounts with WebFaction, and I am using RoundCube webmail interface to access my mail that is associated with those accounts. I have multiple mailboxes on both accounts. It seems ...
3
votes
3answers
253 views
I stupidly responded to an email from a hacker posing as a friend
I responded to an email from a hacker posing as a friend in distress. I have a really long secure password ... caps/special figures/numbers/over 14 characters long. My account name is my first, ...
3
votes
2answers
153 views
Shared hosting mail server, Thunderbird and encryption
In spite of much searching on the internet, I can't really get an adequate understanding of this topic, perhaps because it combines multiple elements. As a result, I'm really worried about the state ...
1
vote
2answers
130 views
IP attack by reading/writing data?
If I remember correctly there is an ICMP attack whereby you can embed malicious code and it gets read/executed, causing the problem (similar to SQL injection).
Are there any further/more dangerous ...
2
votes
1answer
478 views
Hosted Email Hacked, SQL injection maybe?
I have a hosted website using a free hosting service, I received an email this afternoon saying that I have been suspended because my account has been compromised.
Basically, someone is using my ...
1
vote
5answers
235 views
How can I prevent forwarding a manipulated email?
How can I prevent someone from modifying the contents of an email they received and then forwarding it to others? Some employees cheat managers by changing the content of emails and forwarding the ...
1
vote
3answers
581 views
Email security and Home Mail Servers
Suppose you're truly paranoid (I assume the majority here identify with this?) and you don't want Google or other email service providers reading your email (to serve ads, etc). You don't want your ...
-2
votes
2answers
294 views
Learn IP address of sender of a self-destructing email
How can I know the IP address of the sender who sent me a self-destructing email? If not the IP address... what all information can be extracted?
4
votes
2answers
164 views
How to refuse delivering emails that are not signed by trusted PGP keys?
I'm fed up by spam and would like to have an email address that will only deliver mails signed by users I declared trusted. Some kind of purgatory for mails the signatures of which are trustworthy by ...
6
votes
5answers
309 views
POP3/IMAP Stronger Authentication
We recently deployed a two-factor-authentication solution in order to strength logon to our web applications (one of them is web based mail, Microsoft outlook web access)
Most of the users who have ...
10
votes
5answers
391 views
what would be a good way for a doctor to send xrays encrypted to another doctor?
As a dentist, I often want to send medical information including digital xrays to another doctor. What would be a good/easy way to do this encrypted?
Our organization currently requires that all ...
1
vote
2answers
1k views
Avast says I don't need to use encrypted connections for my e-mail accounts
I am using Outlook 2010 and Avast anti-virus 7. Whenever I add an account to Outlook if I choose to use SSL for incoming or outgoing connections Avast alerts me I shouldn't use it because Avast can't ...
3
votes
2answers
671 views
I'm currently receiving a targeted attack
Since yesterday, I receive forged mails which are targeted at me. They use personal information, seem to come from one of my friends and only contain links to these web sites:
http ...
3
votes
1answer
127 views
Amavisd-New and Google safe browsing
I am studying the Google Safe Browsing.
How do I know that it is possible to intercept a content of an email via amavis, I wonder if I can, for each url found, consult the Google safe browsing?
Do ...
1
vote
3answers
233 views
Instant access to application using token in url
Is it good idea to give access to the site using token in url, this token can be send via email, some sites have reset password done in this way, but I want give access to the whole site (I think I ...
6
votes
3answers
2k views
Is it possible for a phishing link to install a major virus on a Mac?
My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
2
votes
2answers
137 views
E-mail Server Security
In recent news, Bitcoinica was compromised by an e-mail server infiltration. The hacker then applied social engineering, using one of the administrative e-mail accounts to reset the root credentials ...
8
votes
4answers
623 views
When registering for most websites, why do you need to confirm your email address?
I'm working on a site which allows users to sign up for a service. They choose a username/password, enter their personal details, etc and proceed into the site, their details being stored for future ...
2
votes
4answers
693 views
CAPTCHA or email confirmation?
I have read that captcha isn't a perfect solution to protect a website where for example the user can create an account, since there are many people in different countries that practicallty read ...
3
votes
3answers
325 views
How “enforcable” are email disclaimers
Perhaps a more policy questions, and undoubtedly different in differnet parts of the world, but enterprise email "signatures" often include a snippet simmilar to the following:
This email and any ...
3
votes
2answers
805 views
Send credit card info by email from HTTPS and SMTP on SSL
A client asked me to receive credit card info of his costumers by email.
I know that is a very very not secure way ...
But if the page with the input form is on HTTPS, and then i use a smtp (like ...
4
votes
2answers
253 views
what are some instances of compromises due to email sniffing?
Since emails are usually sent in plain text and bounced through a bunch of SMTP relays it is potentially possible for a well placed attacker to sniff for these and read emails without being able ...
6
votes
2answers
1k views
secure webmail provider
Which email providers (e.g. Gmail, Yahoo, etc) offer the most robust security for a personal email account? The recent article about Mat Honan getting hacked illustrates the challenge. The account ...
-1
votes
2answers
150 views
What are the security advantage of new redirecting method used by Gmail and Facebook?
When clicking on the any link in gmail or Facebook,it redirect to that link by some other ways.
What are the security advantage of new redirecting method used by gmail and Facebook?
2
votes
4answers
135 views
The email system is compromised - what can you do?
I have a friend at a 7 person company which has an issue with email confidentiality.
Each time they send out an email with quotes to customer, the competitor get the message in 30 minutes and send ...
4
votes
3answers
245 views
Are there any regulations against financial companies storing passwords in plaintext?
A bank that I use stores my password in cleartext or perhaps using reverisible encryption, which is just as bad.
I know this because when you click "Forgot your password?" (or similar) link, it ...
41
votes
5answers
5k views
Is sending password to user email secure?
How secure is sending passwords through email to a user, since email isn't secured by HTTPS.
What is the best way to secure it? Should i use encryption?
0
votes
1answer
323 views
Issues with using a mail server that doesn't support authentication to send mail?
I have noticed the mail server we use at work (provided by our web-host) doesn't require any authentication to send mail through.
I understand you easily spoof sender address' in emails, but I'm ...
2
votes
2answers
118 views
Are these email captchas legitimate?
The last week, I've been getting this kind of emails to addresses that I don't use:
Dear Sir, Madam,
For security reasons and as part of our ongoing fight against spam, it is our policy not ...
0
votes
2answers
261 views
Can a man engaged in phishing be prosecuted if I know his IP?
My familiar received some emails from a man she meets at dating site. The man sent her his photos by email. In them he made some attempts that looked like phishing so I decided to lookup more ...
-3
votes
3answers
127 views
I use an online email provider - how can I test my password strength?
I want to test my password strength, is there a program out there that can crack my password relatively quickly? I am familiar with BackTrack 5, but I usually use it to test WEP password strength. I ...
1
vote
1answer
194 views
Are there any security issues with importing mail via POP/IMAP?
I'd want to design import mail functionality for an email provider. The process is: user enters email and password for another service at my site and then site accesses another email provider and ...
2
votes
1answer
3k views
How do I create a valid email certificate for Outlook S/MIME with openssl?
I need to create a certificate for email encryption and signing that has to be used by Outlook 2003+. I'm using OpenSSL, my self-signed root-CA is already imported into the trusted root-CA store. ...
0
votes
0answers
202 views
What is the most secure way to recover password online? [duplicate]
Possible Duplicate:
Can anyone provide references for implementing web application self password reset mechanisms properly?
I have website which sends generated password to any person who ...
1
vote
2answers
312 views
Is it possible to fake the mail server address?
Suppose that I send an E-mail to someone.
Is it possible to fake mail server address - for example, while I used my own local mail server, I send it as if it was sent from Microsoft mail server. (I ...
1
vote
3answers
218 views
Recently received a odd email
http://photomi.co.kr/httpcnbc9home-2.com.php?subpage216
Learn How to Make Money 0nline Fast
__________________
. louanne visszakuldod
Sun, 22 Jul 2012 0:33:42
Is there a way to identify what ...
5
votes
4answers
1k views
Can most mail from *.ru be considered spam?
Is it safe to assume that most, if not all, emails from a *.ru domain may be considered spam? From a log of 30000 emails from *.ru, its all been spam (over two months).
-2
votes
2answers
221 views
End of mail spoofing?
I've made the simpliest e-mail program in C#.
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using ...
0
votes
2answers
444 views
How to encode letters in multipart/form-data to include CR/LF characters?
Part of HTTP request that should be sent to server with Content-Type: multipart/form-data; looks like:
------WebKitFormBoundaryQ7KGYev31biaJTW8
Content-Disposition: form-data; name="subject"
...
0
votes
0answers
608 views
how to stop brute force attack to my email server [closed]
I have email server for my office, OS: Fedora12, MTA :sendmail, webmail: squirellmail .
I was accussed of sending spam to others recently .
I found at maillog on my email server , there are someone ...
1
vote
2answers
167 views
AV inserting email header logic
I want to write a small PHP emailing class to be able to send HTML emails. My problem is that in the receiving email an antivirus will insert a header which sometimes simply breaks the entire email.
...
3
votes
1answer
149 views
Facebook changed the default email address for every contact. How do I mitigate the impact and risk?
Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address.
This is an ...
0
votes
1answer
317 views
What user was this spammer trying to authenticate as?
I have a custom application that monitors and logs a user's SMTP session, and came across this spammer trying to use my MTA as a relay.
Is it possible to determine what username they are trying to ...
