Related to email protocols, clients, servers, content, and message format.
3
votes
3answers
296 views
How “enforcable” are email disclaimers
Perhaps a more policy questions, and undoubtedly different in differnet parts of the world, but enterprise email "signatures" often include a snippet simmilar to the following:
This email and any ...
3
votes
5answers
495 views
Clicked on fake “Download Now!” ad on file transfer site (legal file for legit purposes) by accident; does anyone know what measures I should take?
I was sent a file by a coworker via "sendshare" - my first time using the service. The page loaded a bit slowly and the ads came in before the actual download link. I was in a hurry to get the file - ...
3
votes
2answers
652 views
I'm currently receiving a targeted attack
Since yesterday, I receive forged mails which are targeted at me. They use personal information, seem to come from one of my friends and only contain links to these web sites:
http ...
3
votes
3answers
247 views
I stupidly responded to an email from a hacker posing as a friend
I responded to an email from a hacker posing as a friend in distress. I have a really long secure password ... caps/special figures/numbers/over 14 characters long. My account name is my first, ...
3
votes
4answers
261 views
Good, simple list of reasons that email is inherently insecure
I've been searching for a while, trying to find a good get of information about the inherent risks of transmitting sensitive data via email. I'm really looking for a comprehensive list of all the ...
3
votes
1answer
97 views
If most companies do not enable TLS for SMTP and IMAP, should we consider email not secure at all?
Many of our partner companies's email service do not enable encryption. Does that mean our email is not protected at all?
3
votes
2answers
1k views
Some questions about penetration testing distribution Backtrack 5
I know just the basics of backtrack and I want to ask some questions about it:
Can you attack an ftp server using backtrack? an email server?
I have a Centos virtual private server and backtrack is ...
3
votes
2answers
241 views
Legal process for suing joejobber?
I'm currently being joejobbed, and want to sue the joejobber. Details:
I have real damages: the joejob causes me to receive fake bounces, which:
stop/delay my receipt of legitimate mail, since ...
3
votes
3answers
1k views
Delivery Failure Notification spam protection?
My domain (example.com) has recently been targeted by spammers who are sending email (somewhere) but forging the sender as random-name@example.com. I have been getting flooded by delivery failure ...
3
votes
3answers
254 views
Can email be encrypted before it reaches the mail server? If not, is there something that would allow something like this that's being worked on?
I was thinking about hosting my own email (own email server) instead of using Gmail. But then I realized I could never host my email on a server where I'm also hosting Wordpress. That is because I ...
3
votes
3answers
90 views
Are mail-servers removed from security concerns in contrast with cloud storage?
I have meet people and even businesses that are against using the cloud for data storage invoking security risks. In the same time they seem perfectly fine using email services (usually from obscure ...
3
votes
2answers
725 views
Send credit card info by email from HTTPS and SMTP on SSL
A client asked me to receive credit card info of his costumers by email.
I know that is a very very not secure way ...
But if the page with the input form is on HTTPS, and then i use a smtp (like ...
3
votes
1answer
130 views
How to protect against exploitation of email addresses from an mistakenly expired domain?
I have a domain name that I have registered for a long time. Due to a combination of bad luck and oversight, the domain name expired and was rebought by somebody else. I am attempting to buy the ...
3
votes
3answers
6k views
Why did secureserver.net (godaddy) access my gmail account? [closed]
Why did secureserver.net (godaddy) access my gmail account?
One day later...gmail reports suspicious activity...really?
So...Why did secureserver.net (godaddy) access my gmail account?
...
3
votes
1answer
337 views
Is using Gmail's browser-based client, more secure than using IMAP?
I never use the same password twice and my passwords are always comprised of a long, random string of letters, numbers and symbols. (with an offline password manager to store each password string)
...
3
votes
2answers
141 views
Email & Domain ownership?
Most hosting companies, such as mine (hostgator) give the following notice when providing a contact email:
Email address that you can be contacted at. This should be an email address that is not ...
3
votes
2answers
419 views
Do fake-address generators work?
There are several pages on the Web that generate fake e-mail addresses so spammers can harvest them; the purpose is to fight spam. (Some examples of this concept under discussion and, in some cases, ...
3
votes
4answers
138 views
Safe to reply to a suspicious email?
Can something happen to me (or my computer) if I respond to a suspicious plain text email?
I received an email from an unknown address, and I am not sure if this is a "real" person.
I would have ...
3
votes
1answer
124 views
Amavisd-New and Google safe browsing
I am studying the Google Safe Browsing.
How do I know that it is possible to intercept a content of an email via amavis, I wonder if I can, for each url found, consult the Google safe browsing?
Do ...
3
votes
3answers
722 views
Is there any way to set up secure email for Network Solutions domains?
I'm trying to set up any mail client to have a secure connection to Network Solutions' email servers.
I've been talking with Network Solutions' email support people, who will repeatedly state that ...
3
votes
1answer
343 views
quizrace.com - Malware or just a game?
This quizrace.com quiz game is spreading like a virus all over internet forums and sites like 4cahn, minecraft etc (just google for it) - because it requires you to invite 3 friends to continue beyond ...
3
votes
2answers
145 views
Shared hosting mail server, Thunderbird and encryption
In spite of much searching on the internet, I can't really get an adequate understanding of this topic, perhaps because it combines multiple elements. As a result, I'm really worried about the state ...
3
votes
1answer
145 views
Facebook changed the default email address for every contact. How do I mitigate the impact and risk?
Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address.
This is an ...
3
votes
2answers
166 views
Securely storing (email) lookup database
Looking for suggestions on implementing a server-side lookup table, where the key is an email address.
Goal: Keep these email address private, even if data on the server is stolen.
Assumptions: The ...
3
votes
3answers
159 views
Resources/tools for controlling access to corporate email on smartphones
If one of our employees has access to corporate email on a smartphone I want to make sure that if they lose the phone then whoever finds it can't get at any corporate email on that phone.
For iOS ...
3
votes
2answers
124 views
What are the security or privacy issues with allowing users to forward email from our Google Apps account to their personal Gmail?
But we have a new employee that would rather all his email in one inbox. I know he can forward the mail to his personal account, send mail using an alias so that it looks like it is coming from the ...
2
votes
4answers
640 views
CAPTCHA or email confirmation?
I have read that captcha isn't a perfect solution to protect a website where for example the user can create an account, since there are many people in different countries that practicallty read ...
2
votes
3answers
268 views
I found a malicious website embedded in Malware spam. What should I do?
An email is using social engineering to get users to click on a malicious URL that downloads javascript and then runs malicious code.
Who should I report these malicious URLs to? (Microsoft ...
2
votes
3answers
310 views
Security issues with email accounts
I am starting to become wary of giving out my email account to anyone, just by doing reconnaissance it is evident how easy it is to pull so much information from a person just by a email,
There is a ...
2
votes
1answer
1k views
Email Spoofed. Explain?
So, I think my email id might have gotten hacked. Can some one offer their comments and suggestions on this email ? It seems this email went from my mail id to my friend's email id. The subject is ...
2
votes
4answers
1k views
If a hacker were to compromise a GMail database
Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database?
I assume nothing, and in order for ...
2
votes
4answers
235 views
How can an internet contest verify unique votes with only an email as an input parameter?
For my computer security course we are brainstorming different ways to use attributes for a unique user (that are readily available over a network) to prevent various mischievous activities. We've ...
2
votes
2answers
366 views
How does the Yahoo webmail exploit work?
I got an email (referring to me by name) from somebody I knew a while ago and the email itself was just two/three lines containing a bit-ly link. Although it seemed like it actually could be ...
2
votes
4answers
135 views
The email system is compromised - what can you do?
I have a friend at a 7 person company which has an issue with email confidentiality.
Each time they send out an email with quotes to customer, the competitor get the message in 30 minutes and send ...
2
votes
2answers
3k views
How commonly are SSL/TLS or S/MIME used by e-mail providers?
I was reading through different posts here about email security. After reading these I still have some questions.
I understand that S/MIME can be used to transfer email securely between servers.
...
2
votes
1answer
256 views
Possible Hijacked Email Server [closed]
MAILER-DAEMON notices are spamming our email administrator account, causing it to fill up, and bringing down our email server.
Our email server is a Virtual FreeBSD box hosted by Verio. Their ...
2
votes
1answer
1k views
Spoofing email From address
Providing all legal measures are taken care of, what are some of the ways someone can spoof an email "From" field address and actually get the email to the recipient without spam filters getting in ...
2
votes
4answers
267 views
Yahoo Email Keeps Getting Phished
I keep getting spam emails from myself (and I am sending them to others as well) on my Yahoo Mail account. I have already went through two password changes which I thought were secure. My very last ...
2
votes
1answer
213 views
Email Compromised due to Yahoo Mail Exploit
On Monday due to XSS vulnerability present in the Yahoo mail my email has been compromised. I have immediately changed my password but i am not sure is this enough i.e. do i need to delete my cookies ...
2
votes
2answers
217 views
Company sending Master passwords in unencrypted emails
If a company has terrible security policies like letting people email password in cleartext emails, what to do if they reject all fair minded advice?
2
votes
1answer
61 views
If a hacker gets into my PC can he get to my saved windows live mail passwords?
If a hacker gets into my PC can he steal my emails passwords? I use the windows live mail client to manage my email and I have saved my passwords when it asks me to save them. I run like 9 mail ...
2
votes
1answer
80 views
The security of sending emails with SPF/DKIM, but not signed
We're using an email sending service (fairly known) to send our emails. We made DNS changes so that emails going through them would pass SPF and DKIM.
A few days ago we noticed that they allow any ...
2
votes
3answers
114 views
Is it possible to block emails (to all email accounts) that contain certain word/phrase patterns?
I'm not sure if this is the most appropriate SE group to ask this question but I'm hopeful that it will get some interesting and helpful input from the folks here before it is possibly moved.
A ...
2
votes
1answer
86 views
Apart from the lack of native Oultook support, why should one prefer S/MIME over PGP/MIME for email?
From my (still quite subjective) point of view, GnuPG/PGP is superior to SSL (or more specifically, PGP/MIME over S/MIME; maybe in other areas SSL is the better choice), e.g. due to the support of ...
2
votes
3answers
150 views
Should email verification links be 'time limited' after user registration?
Regarding web application user management, I understand that password reset links are effectively "password equivalents", and therefore it makes sense to limit them to one use only and also make them ...
2
votes
3answers
146 views
PCI Compliance Problem
My company is trying to become fully PCI Compliant and we are switching our outdated systems to use Authorize.net CIM among other things. But, currently we're all over the place and until our new ...
2
votes
2answers
469 views
Google Mail alert message. Hacker from China
I have had a red warning box on top of the page when I access GMail. It says that there have been three attacks from China:
IP Address: 117.70.121.33
Location: Xuancheng, Anhui, China
and ...
2
votes
2answers
136 views
E-mail Server Security
In recent news, Bitcoinica was compromised by an e-mail server infiltration. The hacker then applied social engineering, using one of the administrative e-mail accounts to reset the root credentials ...
2
votes
2answers
117 views
Are these email captchas legitimate?
The last week, I've been getting this kind of emails to addresses that I don't use:
Dear Sir, Madam,
For security reasons and as part of our ongoing fight against spam, it is our policy not ...
2
votes
1answer
90 views
Securely notify users about account changes
I am developing a web application (using PHP) and I am wondering what the best way is to notify users that someone updated their account information? The information that can be updated includes:
...
