Related to email protocols, clients, servers, content, and message format.
1
vote
1answer
566 views
How to generate self-signed certificate for S/MIME with usage 'signing' only, like DOD uses
I'm testing a feature to support S/MIME mail signing and encryption. As far as I know US DOD has quite strict standard on these certificates. So that DoD uses separate authentication, signing, and ...
1
vote
1answer
92 views
Should the email server/application be protected by 2 factor authentication? What applications should be protected?
When should email be protected by 2 factor authentication?
Suppose a given company is in an industry where two factor authentication is offered to some or all of its clients. Does this mean that it ...
1
vote
1answer
74 views
Detecting and Responding to Email Account Compromise (regarding FINRA 12-05, ISAC/IC3 alerts)
FINRA, the ISAC and IC3 issued an alert regarding e-mail based attacks that attempt to obtain client contact information. They then use social engineering / persuasion to complete the attack.
What ...
1
vote
2answers
321 views
How secure is Goodlink for mobile phones when compared to Activesync?
Some of our more technical users are arguing to use Activesync for their phones, while the corporate standard is limited to Blackberry and any device that supports Goodlink.
One argument is the ...
1
vote
1answer
56 views
How can I allow local pop3 but enforce remote pop3s on my ubuntu/postfix/dovecot OS/MTA/MDA
I would like to allow local clients to access email via any of pop3, pop3s, imap, or imaps if they so choose but restrict remote clients to pop3s and imaps only, simililarly to how I already do for ...
0
votes
2answers
248 views
Can a man engaged in phishing be prosecuted if I know his IP?
My familiar received some emails from a man she meets at dating site. The man sent her his photos by email. In them he made some attempts that looked like phishing so I decided to lookup more ...
0
votes
3answers
635 views
Email hacking myth
I never believed that some one can actually hack an email that easy. If someone hacks an email it means he actually hacked the server and he will gain access to many emails not to mine only. Anyway ...
0
votes
2answers
125 views
“You have new mail” message
I received a message from Google saying someone entered my email account.
I confirmed that there were an access from an IP in another country.
I have noticed "You have new mail" message when I open ...
0
votes
2answers
109 views
Keyloggers - Ports used by keyloggers
According to this article, keyloggers usually make use of the FTP ports and email ports:
http://rbmikrotik.blogspot.com/2011/07/how-to-block-port-frequently-keylogger.html
My question is, can a ...
0
votes
3answers
355 views
Are Facebook, Yahoo, Google, etc. hackable?
Just to be clear, I am not asking how to hack in these services, I am just curious. Let me try to explain.
Since I know a little bit about computers, people automatically assume I know how to have, ...
0
votes
5answers
2k views
Is update@em.facebookmail.com legitimate?
I'm having a hard time figuring out whether this email a friend of mine got is legit or a scam. The weird thing is there's only one link to facebook.com, which is the one about facebook terms. All the ...
0
votes
3answers
244 views
Petraeus scandal - what would have been a better way to communicate electronically [closed]
Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
0
votes
1answer
163 views
How do I know if my email account has been hijacked?
A few times now, I've received emails from contacts with subjects along the lines of "hi!" and message bodies of only a link to some website. I've checked the ip of the sender of these emails, and ...
0
votes
1answer
306 views
What user was this spammer trying to authenticate as?
I have a custom application that monitors and logs a user's SMTP session, and came across this spammer trying to use my MTA as a relay.
Is it possible to determine what username they are trying to ...
0
votes
2answers
219 views
Whether PGP is send over MIME?
If I am using PGP to encrypt mails whther it is send as a MIME (Multipurpose Internet Mail Extensions) message, and S/MIME and PGP are used for providing email security.
When I send PGP message ...
0
votes
2answers
230 views
Spam that comes from names in my address book, but not their email addresses
I've recently received two spam messages that show a possibly worrying degree of knowledge about my contacts, and I'm wondering how concerned I should be.
Specifically, the names -- but not the email ...
0
votes
3answers
124 views
Secure design for handling mail attachments
I'm fan of split design for web browsing for security reasons - trusted web sites can be accessed via http proxy from pc clients, the rest of web sites via some remote desktop technology from specific ...
0
votes
1answer
315 views
Issues with using a mail server that doesn't support authentication to send mail?
I have noticed the mail server we use at work (provided by our web-host) doesn't require any authentication to send mail through.
I understand you easily spoof sender address' in emails, but I'm ...
0
votes
2answers
434 views
How to encode letters in multipart/form-data to include CR/LF characters?
Part of HTTP request that should be sent to server with Content-Type: multipart/form-data; looks like:
------WebKitFormBoundaryQ7KGYev31biaJTW8
Content-Disposition: form-data; name="subject"
...
0
votes
1answer
204 views
GoogleMail encryption
Gmail provides an SSL connection and also encrypts the entire session by default. But if you send a mail, once it leaves gmails servers, it can be read at any point on the internet. But what about ...
0
votes
1answer
468 views
Email not received when sent by our app, received when sent by outlook [closed]
We have an application that sends mail in bulk, via a mail provider (Mailjet). Our clients are professional organizations, and they send important mails about meetings and stuff like that, to about 10 ...
0
votes
1answer
83 views
Ports used by Online Email Accounts such as Yahoo Mail, Gmail etc
Let us say that I send an email using Yahoo Mail or Gmail. Can this email be intercepted using a packet sniffer?
On which port does the email travel? HTTP, SMTP, POP3?
Thank you.
0
votes
1answer
117 views
Using a separate email address for each contact
A lot of the people I exchange emails with use services such as Google Mail. Recently it occurred to me that Google must maintain a social graph based on who exchanges emails with whom. It bogs me ...
0
votes
1answer
168 views
TinyDNS and SPF: how to do the '99' records? [closed]
How to do it, the text records are trivial, but how to encode a "99" field in tinydns?
0
votes
0answers
61 views
Email/Secure email sparsing [closed]
I am not an IT professional so please excuse the explanation of my problem:
We are using a CRM software on our server that allows us to email (contact info, notes, etc) directly from the software to ...
0
votes
0answers
23 views
Spoof email, spam and link bait? [duplicate]
Possible Duplicate:
What malicious things can happen when clicking on links in email?
Recently, I have been receiving a couple of SPAM emails seemingly from one of my friends. The email ...
0
votes
0answers
129 views
Roundcube login only looks at first 8 characters of password entered? [closed]
I have two hosting accounts with WebFaction, and I am using RoundCube webmail interface to access my mail that is associated with those accounts. I have multiple mailboxes on both accounts. It seems ...
0
votes
0answers
202 views
What is the most secure way to recover password online? [duplicate]
Possible Duplicate:
Can anyone provide references for implementing web application self password reset mechanisms properly?
I have website which sends generated password to any person who ...
0
votes
0answers
576 views
how to stop brute force attack to my email server [closed]
I have email server for my office, OS: Fedora12, MTA :sendmail, webmail: squirellmail .
I was accussed of sending spam to others recently .
I found at maillog on my email server , there are someone ...
0
votes
0answers
586 views
Hiding IP address when sending e-mails [closed]
Suppose you have your own domain and send e-mails from there. How and where can you configure to hide your IP address from showing up in the message headers?
Is that something you do at the site you ...
0
votes
0answers
110 views
Email draft was answered without being published [closed]
How can someone read my draft in an email link? Someone answered my draft when it was never posted. Is there software that allows someone on an email link to see drafts or forwards or blind copies?
-1
votes
4answers
106 views
Is there any way to know the contact email on a contact form? [closed]
When a website has a contact form where the email isn't shown, is there any possible way of know to which email is the contact form sending the message?
-1
votes
2answers
146 views
What are the security advantage of new redirecting method used by Gmail and Facebook?
When clicking on the any link in gmail or Facebook,it redirect to that link by some other ways.
What are the security advantage of new redirecting method used by gmail and Facebook?
-1
votes
2answers
143 views
Hiding emails from Google [closed]
From what I understand Google reads/scans all my emails so that they cab "provide" targeted ads and maybe for other reasons.
If a have a group of people who want to hide their emails from Google, how ...
-1
votes
3answers
160 views
What is the most reliable way to transfer emails without specific recipient support?
Many suggestions on transfering emails securely can be found in this answer. But many of them (e.g. PGP) need support from recipient. I want to provide SMTP email server that will route emails of it's ...
-1
votes
2answers
101 views
Can 2FA help handle mixed personal and business accounts after leaving a company?
I do not want a super administrator in Google Apps to log to my account after leaving company, so I enabled 2-step verification. He could login to many sites as me with just a link in "forget ...
-1
votes
1answer
99 views
E-mail with obfuscated code / no trace in e-mail server
I've got a situation where one of my clients sent me an e-mail with what appears to be obfuscated shell code. The really bizarre thing here is that I see no trace of this e-mail showing up in the mail ...
-1
votes
2answers
82 views
Keyloggers and Email Accounts [duplicate]
This morning, I was experimenting with some keyloggers and noticed that they have a feature to send e-mails to the attacker.
How can these e-mails be intercepted? Let us say that I have a packet ...
-1
votes
2answers
166 views
sanesecurity - clamav - getting a false positive - should I bother?
A client of mine reported that he isn't getting emails sent from our domain. This is offcourse a false positive, as we are a legitimate comapny. I am also not hearing this issue from other clients (we ...
-1
votes
0answers
52 views
TLS Certificate in OSX Mail
My question hasn't been asked before here but when I googled for an answer I arrived at this thread @ macrumors.com. The question is quoted below:
I'm just curious, but in Lion's Mail there is a ...
-1
votes
1answer
740 views
how to trace the IP address of gmail account sender via browser [duplicate]
Possible Duplicate:
How to trace email?
i wanted to know the location of sender email which sent us the threat email the header of email is mentioned below
Analysis:
Received: from ...
-2
votes
2answers
291 views
Learn IP address of sender of a self-destructing email
How can I know the IP address of the sender who sent me a self-destructing email? If not the IP address... what all information can be extracted?
-2
votes
2answers
204 views
End of mail spoofing?
I've made the simpliest e-mail program in C#.
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using ...
-2
votes
1answer
742 views
Why Gmail logs you out automatically? [closed]
Last few days I have been auto logged out of Gmail. I have not been using any other google related websites on same browser, so there is no chance that I may have logged out from different service.
...
-3
votes
3answers
2k views
How to trace email?
Is there any tool to trace all emails? I need to trace ip address and location of sender address.I also need to identify emails from fake address.
-3
votes
1answer
74 views
Automated scanning of personal email [closed]
I am a current user of gmail, and have recently become interested in the privacy policies of the large webmail providers like gmail, yahoo, hotmail etc. I understand that it is commonplace for them to ...
-3
votes
3answers
124 views
I use an online email provider - how can I test my password strength?
I want to test my password strength, is there a program out there that can crack my password relatively quickly? I am familiar with BackTrack 5, but I usually use it to test WEP password strength. I ...
-6
votes
2answers
57 views
Why my Email are received in the spam folder? [closed]
I am using Mass email marketing or shoot out email campaign but my subscriber received my mail in spam folder what are the reason of this and how can I prevent them.
Question reference: Email ...
