Related to email protocols, clients, servers, content, and message format.

learn more… | top users | synonyms

2
votes
3answers
384 views

How secure is an Activation Email?

Is there any risk to an Activation Email? My ASP.NET Site is set up so that a user has to check their Email and click an activation link which is made of a GUID created as their user ID in the SQL ...
2
votes
2answers
2k views

Google Accessed My MSN Account!

I just received a notification from Microsoft that my Microsoft account has been blocked because it's been accessed by an IP address that's never accessed it before. I received this notification as a ...
1
vote
3answers
726 views

Are Facebook, Yahoo, Google, etc. hackable?

What I would consider to be hacking one of these services is something along the lines of cracking databases (or I think what would be databases). In reality, I have no idea how sites like these store ...
0
votes
1answer
98 views

PHP: Save e-mail address hashed or plain [duplicate]

I've been wondering about something, is it more secure to store an encrypted (hashed with password_hash) email address in the database, or just as plain text? I've google'd this matter and saw that ...
0
votes
0answers
75 views

How can I secure a reply-via-email system?

I am working on setting up a reply-via-email system (similar in functionality to what Basecamp uses) in which a user can reply to an email generated by the system in order to add a message to a ...
4
votes
1answer
81 views

Opening mail from IMAP with no risk for the user

I'm building a website for an association. Its aim is to, out of other thing, provide an easy mail manager to communicate with the member, stored in a database. This database is always up to date as ...
0
votes
2answers
2k views

How to report abuse spam with X-AntiAbuse header which was added to track abuse?

I've received the following spam e-mail (with the link to viagra site): Return-Path: <silviani@server04.funet.co.il> Received: from server04.funet.co.il (server04.funet.co.il. [212.29.215.70]) ...
18
votes
4answers
3k views

Would 'spam' mail really avoid eavesdropping?

spammimic.com offers a service that 'encrypts' your mail as 'spam', the rationale being that all mail services automatically filter out spam, and so if you're wanting to communicate with someone ...
-1
votes
4answers
271 views

Creating a secure and encrypted e-mail service

Model People living in countries with totalitarian, oppressive and other threatening regimes should be able to use this system and have some degree of privacy when communicating. Objectives ...
2
votes
3answers
220 views

Could embedding website links in an email lead to more hack attempts?

My organization currently sends out emails directing our customers to login and view information on a customer portal site we have developed. The content of these emails is usually pretty generic ...
15
votes
6answers
7k views

How do I safely inspect a suspicious email attachment?

I received a pretty blatantly spammy email to my Gmail account. I'm not really sure how it made it through the spam filters, since it has all of the telltale signs. The FROM field is spoofed as ...
2
votes
3answers
100 views

Email Encryption

I'm hoping someone can point me in the right direction. If I wanted to implement email encryption within an organisation what would be the best way? I've been searching the web tonight but all my ...
12
votes
3answers
5k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
0
votes
2answers
457 views

Metadata-free Email: How can SENDER directly, anonymously, and securely ask RECIPIENT’s mail provider to deliver a metadata-free email?

If I want to send emails to friends who use Google, Yahoo, AOL, etc., how can I currently use my local email client to send a metadata-free* email to them? E.g., is it possible to bypass my own mail ...
4
votes
1answer
278 views

How To Encrypt Group Emails?

I'm interested in encrypting e-mails. My very, very basic understanding is that I am to generate a private key, and share my public key with the message recipient (who will share his public key with ...
8
votes
1answer
5k views

Is email encryption, as claimed by ProtonMail, possible?

Is it possible to create a Web service that encrypts all messages, such that only the writer, and the person to whom the mail is sent, can read it? In other words, is the theory behind ProtonMail ...
5
votes
1answer
301 views

PGP-encrypted Email or SSL/TLS Webform for Responsible Disclosure Communication?

So it's a fairly simple question. When offering an avenue to security researchers for communication with us regarding disclosure of security vulnerabilities, what's the best way to do so? Assume we ...
0
votes
1answer
304 views

Security implications for email address and url changes?

recently, we are seeing some From:, To:, Cc: addresses being rewritten from user1@companyA.com to: ...
2
votes
4answers
304 views

Recently received a odd email

http://photomi.co.kr/httpcnbc9home-2.com.php?subpage216 Learn How to Make Money 0nline Fast __________________ . louanne visszakuldod Sun, 22 Jul 2012 0:33:42 Is there a way to identify what ...
1
vote
1answer
109 views

Test if an email address is spammer's

How can I test if an email address is a spammer's? I received a reply to my Craigslist post, with a gmail address in the email body. Craigslist uses some way to hide my email addresses, if I choose ...
4
votes
5answers
260 views

Using unique email address for online signups?

After reading the recent social engineering of a user's twitter handle, I started thinking about ways to improve my own online security. We can only do so much too protect ourselves because at the ...
0
votes
1answer
304 views

Clicked link on fake email which appeared to be from friend [duplicate]

I receieved an e-mail which at first glance appeared to be from a friend, I clicked on the link provided without thinking as we would often exchance links to sites. The link went nowhere i.e page not ...
5
votes
3answers
6k views

TLS library problem when connecting to Dovecot

I have a Comodo PositiveSSL certificate issued for mail.btcontract.com and I've set up Postfix and Dovecot to work with it in the following way: Postfix main.cf: smtpd_tls_cert_file = ...
5
votes
3answers
5k views

How to Stop Email Spoofing [closed]

Apart from SPF, what else can be done to stop hackers from spoofing your company's email addresses?
1
vote
0answers
48 views

Webistes listing email address lists for spammers [closed]

Which websites would you usually check if you suspect that your company's address book has been leaked and is being used by spammers? I have identified https://pwnedlist.com/ for this purpose but was ...
7
votes
6answers
6k views

How are ProtonMail keys distributed?

There is a service called ProtonMail. It encrypts email on the client side, stores encrypted message on their servers, and then the recipient decrypts it, also on the client side and the system ...
1
vote
2answers
206 views

Is it possible to restrict email accounts within one computer?

can emails(e.g gmail)can be configured to open-up only in my laptop ,my operating system is windows 8 and is it possible to restrict my gmail account to be opened up only in my computer?Usually we ...
0
votes
1answer
71 views

Endpoint for checking if user exists in system

I have question regarding users point of view of this endpoint /api/user which requires POST data: email=user@domain.com and returns {"user@domain.com": "exists"} I am concerned if users might think ...
28
votes
10answers
6k views

How to explain to a customer that spamfilters don't catch everything

I used to work in a small office which provided basic desktop support for users. One day I had to answer a call from a very angry customer and he asked for my boss. He wanted to know how could one ...
5
votes
6answers
5k views

How did the spam email sender get my name?

Some time ago I bought something online from a reputable website. I paid through my credit card and everything worked fine. The thing which is important to note is that the name used on the credit ...
1
vote
3answers
175 views

Potential risks when sending plain text E-Mails with encrypted attachments?

To ensure privacy in communication I encrypt and sign E-Mails using gpg4win. However, sometimes the communication does not work as expeceted (GPGTools and Outlook/gpg4win seem to be incompatible). In ...
1
vote
1answer
134 views

Tracking sender of Email via email address ONLY

Is there a way to track the sender and the location via the email address only. The problem is somebody has created a similar sounding email id to send content to my official circle with a view to ...
28
votes
3answers
3k views

Tell people that I can encrypt emails

I know that it is still not very easy to use PGP for an average user. However, the situation is improving (there are some easy plugins that can even nicely integrate into your GMail webmail). In ...
1
vote
2answers
2k views

Based on these email headers, where is this virus coming from?

I'm seeing a virus in our network with some strange headers. Sometimes they are coming (sourced) from a netscaler VIP, other times they seem to come from an Exchange hub server. How do I determine ...
1
vote
2answers
139 views

Viruses From Email Attachments

My company just got a worm. The specific one is beside the point, but I linked a couple pages that I think describe the worm / virus below. We're getting lots of emails to Outlook asking us to open ...
12
votes
3answers
17k views

Is a password protected PDF file safe for bank statement attachments?

My bank emails my monthly statement to me in a password protected PDF attachment. Is this a secure method of transmitting something as sensitive as bank statement?
-8
votes
1answer
1k views

Is this email from Liliane Bettencourt a scam? [closed]

I received the following email from someone claiming to be the second-richest woman in the world, Liliane Bettencourt. I, Liliane authenticate this email, you can read about me on: ...
6
votes
2answers
266 views

Have both my email address and IP been spoofed, or has someone gotten my password, or…?

Just examined a spam email sent to me. The header's "originator" has both my email address and my web site's IP address, (my SMTP). My first thought is that someone has obtained my email password ...
2
votes
1answer
2k views

How to secure my network, laptop, ipad and email accounts which are possibly hacked?

Background Last month I noticed lots of failed emails in my inbox and after few minutes I lost my access to my Yahoo Mail. My friends informed me that they have received spam emails from me. So I ...
1
vote
1answer
158 views

help identifying an IP address from email sent from my gmail account

Someone sent the following email from my gmail account. I believe it was hacked and if I can find the IP address I may be able to identify the person who did it. Here is the information. Please let me ...
-1
votes
1answer
122 views

How is PKI used to encrypt an e-mail for multiple recipients?

My understanding is that when an e-mail is encrypted and sent to a recipient, the recipient's public key is used to encrypt the e-mail, and then only the recipient can decrypt it with their private ...
1
vote
1answer
145 views

Spam Mail - have someone broke in to my shared hosting account? [duplicate]

Yesterday I noticed that one of my e-mail addresses (the only one within that domain) started to receive a lot of weird messages that the mail haven't reach the target (something like "Sorry, Qmail ...
3
votes
1answer
565 views

Wrapping my head around Protonmail

I've been trying to grasp how Protonmail could work. From what it gather, it works like this: When you signup, you create an account password and a mailbox password. A PGP private/public key pair is ...
5
votes
1answer
641 views

How is ZixCorp able to provide email encryption without a password?

I am trying to understand how/if an email I received is being encrypted. A financial institution sent me a verifiable email (i.e. not phising) asking me to fill out a pdf form to complete a ...
-4
votes
1answer
114 views

Email obfuscation/munging recent research [closed]

Does anyone know of any recent (past year or two) research into email obfuscation/munging? All I can find are tests done five to ten years ago. I'm trying to decide whether it's something still ...
1
vote
3answers
649 views

Postfix master running as root

Does running /usr/lib/postfix/master as a root could cause a security threat ? A fresh installation, gives this : root 11622 0.0 0.0 4792 1432 ? Ss 19:11 0:00 ...
6
votes
5answers
19k views

Email headers from messages sent via Gmail online client contain private IP addresses. What are these addresses?

Someone has sent a sensitive email from my Gmail account. I wanted to trace the IP address by checking out the Received: by X field in the header of the sent message. However, every message that is ...
3
votes
1answer
594 views

Email clients and POODLE vulnerabilities

I use a commercial email service that provides IMAP over SSL on port 993 and SMTP over SSL on port 465. I currently connect to their servers with Thunderbird and the Apple's iOS8 email client. Could ...
1
vote
2answers
237 views

E-mail tracking countermeasures

I've started using Sidekick to know when an email is opened or one of the links in it is clicked. What I ask now is how to know if an email I received is provided with a similar tracking system. With ...
12
votes
2answers
1k views

Should I change phone number and e-mail address after PayPal fraud?

I have been the victim of PayPal fraud. I hadn't used PayPal in a year and then within 9 days there were three unauthorized transactions on my account for a total of 150 Canadian dollars and 290 ...