Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,462
questions
0
votes
0answers
32 views
Tampering original email when forwarded [closed]
What are consequences of taking someone’s original work email and tampering it by manually inserting recipients under TO section of the original email and then forwarding it. The original email did ...
0
votes
0answers
43 views
Accidentally clicked spam email link on android, risk of malware? [closed]
I was browsing my spam folder on my phone in the gmail app and stupidly let curiosity get the better of me. The app had blocked images by default but I clicked to allow them as well as accidentally ...
0
votes
1answer
70 views
How can I perform a brute force attack on a webmail site which has no firewall and has an unlimited amount of tries? [closed]
My professor made this site for us and gave us a project to find the password if we have the email. Is it possible?
Not sure if this is relevant, but the site isn't HTTPS also
-1
votes
0answers
59 views
How can I brute-force the email id to reveal the email hidden behind the asterix in an account recovery page? [closed]
I know it is not possible to directly decode the asterisk. But that's when something struck my mind. If the hidden email is to******h@g****.com, and the person's name is Tom Smith, the email could be
...
35
votes
7answers
11k views
If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?
I've been trying to figure out "practical encryption" (AKA "PGP") for many years. As far as I can tell, this is not fundamentally flawed:
I know Joe's e-mail address: cool_joe@gmail.com.
I have a ...
0
votes
2answers
103 views
Someone is using my email to create online accounts; what should I do? [duplicate]
I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
0
votes
0answers
25 views
I've been an emailed a password; how can I proceed as securely as possible? [duplicate]
I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
0
votes
2answers
120 views
High bounce rate due to attacker is using website's mail system
We got a realatively high bounce rate today, because someone decided to spread some links using our mail server. The implementation looked like this:
He used the registration form and planted a link ...
0
votes
1answer
63 views
Force specific encryption cipher for S/MIME mails
I have a number of contacts who can only decrypt 3DES, when it comes to S/MIME encrypted mails. I'm aware that this is by far not ideal, but better than no encryption at all.
My problem is, that I ...
0
votes
2answers
96 views
Phishing emails - What do I look for?
I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one?
There are some things I know to look for already but I want to get moer ...
0
votes
1answer
49 views
DMARC & failing SPF
I would like to clarify the following scenario with DMARC, (assuming there is a publish DMARC policy):
SPF fails
No (aligned or any) DKIM records
Should result of DMARC check be none or fail? ...
0
votes
0answers
31 views
Do we need SPF when we have DKIM? [duplicate]
I always thought that to authenticate email we needed both SPF and DKIM (and DMARC). But email is confusing and recently I found myself asking why we can't do with just SPF or DKIM. I then discovered ...
1
vote
0answers
41 views
Why have a password at all? [duplicate]
Consider the following common security scenario:
I need to log in with an email and password.
I can't remember my password so I click "forgot password"
Website emails me a password reset link.
I can ...
9
votes
3answers
196 views
Is there a benefit to using a different email for every online account?
I have a domain email address which in addition to being able to create multiple mail accounts allows the creation of aliases for each inbox.
Is there any benefit to security in using a different ...
0
votes
0answers
29 views
How is this entity spoofing a PayPal email address? [duplicate]
Someone I know received an email from service@intl.paypal.com claiming to be a receipt for a purchase on their account. However, looking at the from line, there's another email next to the PayPal one ...
0
votes
2answers
206 views
What to do with a suspicious email from someone I know (seemingly using the real mail of that person)?
TL;DR, I think this mail was sent by mail.okgroup.cz. Not sure though, I would like confirmation.
I just got a mail from my sister with no subject and only a link.
NOTE; That the email used in this ...
3
votes
2answers
145 views
Can someone read my email if they have my smtp credentials?
Assume Mallory knows the server, username and password that Alice uses to send email via smtp. Can Mallory read Alice's email? Does it depend on the specific system or configuration?
-1
votes
1answer
63 views
Is it possible to setup email servers to encrypt communication in transit?
I understand that generally email communication is insecure by default and would like to know if its possible to setup email servers so that the emails get encrypted when sent between hosts.
I want ...
2
votes
1answer
167 views
If my protonmail password is compromised, does that potentially mean that my whole account is, permanently?
My (limited) understanding is that my password is used to encrypt the keys which are used to encrypt my mail messages on protonmail's servers. Does that mean that knowledge of my password could ...
45
votes
8answers
9k views
Why do email server/clients block executable attachments?
If I send an email with an .exe attachment to an Outlook recipient, the email client blocks the attachment and the recipient has no way of overriding this security setting (short of making certain ...
0
votes
0answers
44 views
Packaging Python code for github: should I obfuscate author email address from the `setup.py`?
The standard file with packaging instructions (setup.py with setuptools) for Python contains an author_email field. Such a package can then be published to PyPI, but the code is also available ...
0
votes
3answers
111 views
E-Mail privacy proxy for hiding real e-mail?
Do E-Mail proxy services exists to improve privacy and security?
Privacy in the sense that one wouldn't need to give a website his/her username (possibly even in the firstname.lastname@domain.tld ...
65
votes
5answers
14k views
My email address is being used to enroll for online services. Should I be concerned?
Just before Christmas I received the following message in one of my GMail accounts:
Sign-in attempt was blocked
********@gmail.com [redacted by me]
Someone just used your password to try to ...
1
vote
3answers
169 views
POST requests are bypassing PHP checks
I have a website with a contact form on PHP and a mail server.
Email are sent with the help of PHP mail function like so
$name = cleanInput($_POST["name"]);
$e = $_POST["email"];
$email = filter_var(...
0
votes
0answers
42 views
Email signature with PKCS11?
While S/MIME has been a PKCS7 standard, what happens while I sign/encrypt an email using a smart card implementing PKCS11? Is PKCS7 supported as kind of backward compatibility?
2
votes
2answers
217 views
It's possible to make an account in mainstream social media without giving them my phone number or have a phone number that can identify you?
I'm learning about privacy and security and one of the tips everyone always talk about is compartmentalization, I'm trying to do this and get rid of my old profiles in social media (one of them have ...
2
votes
1answer
61 views
ISP Email Issue on Port 25 [closed]
My ISP, a small, local “mom & pop” outfit, provides my email services. For the last six months or so, my main email account frequently fails to update with the following message, “Could not ...
3
votes
1answer
107 views
Putting personal Data in E-Mail vs sending password in plaintext to access that data
I started working on a service that sends out mails with a link to a registration form. (e.g. a registration for a movie premier)
The link would look like this https://movie-premier.com/rsvp/USERCODE
...
1
vote
1answer
62 views
Can someone redirect or block emails of a specific sender?
I’m expecting some information from a governmental organisation, they claim that they already send the info via email, but I have never received anything.
They also have an automatic reply email, ...
5
votes
3answers
177 views
How to prevent spam when sender email is never the same? [closed]
Recently, I have been massively spammed by emails, and unsubscribing via the link doesn't work. Another option is to block the sender, but the problem is that the sender email is never the same. It's ...
0
votes
1answer
67 views
emails were send from my own email address [closed]
A friend of mine has just received an email from my exactly own email adrress. What could this be and how do I stop it?
7
votes
2answers
366 views
Why do we receive contact form spam with random characters?
For the last two weeks we have been receiving a form of spam through our website contact form that I haven't seen before.
It looks like this:
Name: iYvNgmpTLwxqaCj
Company: lqidQuVNMhIJsz
E-...
1
vote
0answers
80 views
Recruiter pretends to have found my e-mail address through GitHub account. How to check if this is true? [closed]
A recruiter directly e-mailed me about a job offer and pretended to have found the e-mail address via my GitHub account. Normally I receive e-mails via LinkedIn and almost never directly, as I try my ...
3
votes
1answer
160 views
Can simply opening an email lead to a hack? [duplicate]
It is common to be wary of links and attachments in emails but I have heard some people say that opening the emails themselves can be risky. Are vulnerabilities that can be exploited simply by opening ...
1
vote
0answers
20 views
Are there any security vulnerabilities with domain email forwarding?
I recently bought a domain through CheapName.com which offers free email forwarding. I would like to use it to have a unique email for every account I make online (because it can be set up so all ...
0
votes
1answer
113 views
Someone I don't know is sending me test mail. Is this a scam? [closed]
In the last couple of weeks I've received several e-mails at my work account (a small research non-profit). The format is similar for all:
"Test mail" in subject line
No content in body
Address ...
0
votes
0answers
45 views
Is there a way to block/filter spoofed emails Office 365/Exchange?
My company is currently a target of some social engineering attacks where company employees are being sent e-mails from the attacker pretending to be senior members of staff. They have the correct ...
7
votes
2answers
922 views
Trying to understand the point of this scam email
I was reviewing my spam folder and spotted this:
People are going to have one of two reactions:
Hooray! Free porn! Confirm, confirm, confirm! OR
OMG! I didn't sign up for porn! Now everyone can see ...
1
vote
0answers
80 views
Is it possible to hijack specific e-mail with remote access? [closed]
I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
6
votes
1answer
227 views
Professor wants a Wireshark capture of mail client and browser activity of my own machine
As part of a home exercise in my networking class, the professor is asking students to submit a Wireshark capture done on the students' private machines.
The capture must contain activity of the ...
-1
votes
1answer
84 views
Misspelled recipent, same or unique? [closed]
I have x.x@gmail.com as primary email-address, but per accident i sent confidential information to xx@gmail.com (note the dot). How will this be handled?
0
votes
0answers
13 views
Granting access to mailbox/calendar to another with MFA enabled?
Jane needs access to John's Outlook mailbox and calendar. When Jane attempts to access it (she has his UN & PW) John receives the MFA challenge preventing Jane from accessing it.
This works ...
0
votes
0answers
15 views
IS saving attachment from outlook email to disk to enable reading of file content safe?
I am trying to make sure that the emails attachments are 'what they say they are'.
I am using strings.exe https://docs.microsoft.com/en-us/sysinternals/downloads/strings and
exiftools.exe https://...
3
votes
1answer
52 views
Can any private key information be exposed when signing an email? [duplicate]
So I know that PGP encrypted email can be vulnerable to a known-plaintext attack from a known, consistant email footer or greeting (“Hello”, “Yours truly, xxx”, etc), but does the same thing apply to ...
1
vote
2answers
462 views
Bypassing NET::ERR_CERT_DATE_INVALID
When I try to access the Openmailbox web site, Google Chrome returns a NET::ERR_CERT_DATE_INVALID error:
"openmailbox.org normally uses encryption to protect your information.
When Google Chrome ...
1
vote
1answer
69 views
Can a forwarding rule be set on Outlook that will not be visible on office365/exchange admin interface?
In an incident concerning a user's mailbox - will any rule that forwards emails to a potential attack be visible in the office365/exchange admin interface, or is it possible to set an outlook client-...
2
votes
1answer
129 views
I received an phishing email from myself [duplicate]
So today when I was checking my spam folder on my outlook account, I noticed I had received an email from my own address.
The email looks like a typical scam:
Claims to have installed a RAT on my ...
0
votes
1answer
75 views
Email including self-shredding macro after “Seen” flag is set
Bob sent an email to Alice with nothing much useful and tenuous ( but because it isn't useful it can ruin Bob's reputation if bad Alice decide to publish. )
Is there a way for Bob to include a ...
0
votes
1answer
112 views
Bizarre email sent from spam email address with contact details of someone I know and a friend of their's in it [closed]
Someone I know (call them Darren Smith) recently received a rather odd email. It was sent to their personal email address, emailaddresswithnonameinit@emailprovider.com. The "From" field had "Darren ...
3
votes
2answers
107 views
What prevents malicious servers from spoofing mail transfer agents and/or mail delivery agents?
An email system typically consists of multiple agents:
Mail user agent (MUA)
Mail submission agent (MSA)
Mail tranfer agent (MTA)
Mail delivery agent (MDA)
Evidently the 'middlemen' of this system ...
