Questions tagged [gmail]
Gmail is a free e-mail service provided by Google.
226
questions
0
votes
0
answers
18
views
IP address from headers (Gmail/outlook mobile app) [duplicate]
My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it.
I need to make sure that I'm right ...
- 101
0
votes
2
answers
87
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
0
votes
1
answer
135
views
Is Google mining the content of emails I send to people who use gmail? Could they?
If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
- 9
0
votes
1
answer
108
views
How can I filter out phishing e-mails containing malware using Gmail?
I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this:
6 5 4 8 2586 8016 70170
2 1 08 05 60 172 01 ...
- 183
1
vote
0
answers
5k
views
I received an email that someone created Snapchat with my e-mail - is this a known scam?
On July 31 and a second time after around twelve o'clock at night (August 1) I received two E-mails, which asked me to confirm my E-mail to create an Snapchat account and the second one was stating ...
0
votes
1
answer
385
views
Abnormal Receiving of Google Verification Codes
Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
- 1
0
votes
1
answer
527
views
Are there any known vulnerabilities that exploit google's PDF viewer?
I have told my users for years not to ever click on PDF Documents if they are not 100% sure they know where it came from as they can sometimes be the delivery vector for malicious code.
Recently, one ...
- 7,577
3
votes
3
answers
1k
views
Securing Email: use GPG for all emails?
I am thinking of using GPG to sign commits and particularly to secure emails, and have some questions regarding the usefulness.
Basic threat model
(I use LESP as abbreviation for large email service ...
- 39
0
votes
0
answers
157
views
Stopping a Subscription Bomb
Are there any methods for stopping a subscription bomb other than issuing a new email address? Creating gmail filters is only getting us so far as there are more emails coming in than we can keep up ...
- 11
-1
votes
1
answer
131
views
Does gmail use SPF or DMARC when sending messages outside of gmail?
I can't seem to find any record of SPF or DMARC in the original messages coming from gmail to my mail server.
Does gmail use SPF or DMARC when sending messages outside of gmail?
1
vote
1
answer
173
views
Is there a way to know when someone tries to guess your gmail password?
Is there a way to check if someone is trying to login to my Gmail account without knowing the password (so they keep trying to guess the password and failing repeatedly or trying to guess the answers ...
user265151
1
vote
0
answers
379
views
Security concerns over ˆf_bisa label showing up on Gmail [closed]
Gmail started showing an unidentified label/folder ˆf_bisa.
Doing a quick check, I see that this has only surfaced within the last couple of days:
https://support.google.com/mail/thread/120772882/...
- 739
1
vote
2
answers
316
views
Do fowarded emails retain DMARC protection?
Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
- 141
-1
votes
2
answers
198
views
Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?
I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
- 141
0
votes
0
answers
1k
views
If I receive Google verification codes that do not work, is my phone compromised? [duplicate]
I know that something similar has happened to other people before (see for instance here or here), but the situation and the question are slightly different.
I wanted to log in to my Gmail account ...
- 101
1
vote
1
answer
130
views
Questionable email from discord [duplicate]
I got a gmail from discord saying a new account had been registered and prompting me to click a verification link. Weirdly, I never made that account, and I already had a discord account under my ...
- 11
0
votes
1
answer
124
views
Do email providers somehow validate/control "Send email as: " feature?
I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
- 101
0
votes
1
answer
129
views
Account import into gmail - is it considered safe? [closed]
From my Gmail account / settings, I can import another mailing account (for example a Microsoft Exchange account).
Then Google asks for my personal Microsoft Exchange password (! this is not very &...
- 3
24
votes
3
answers
7k
views
How is it possible for boss to know I am finding a job?
Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right?
I am very very surprised, because :
I work ...
- 351
0
votes
1
answer
77
views
Does the e-mail send from an id to the same id requires encryption and other security checks?
I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same).
Is encryption really required in the above scenario?
Necessity of ...
0
votes
0
answers
295
views
Critical security alert: someone knows your password [duplicate]
Mailed-by: gaia.bounces.google.com Sign.google.com
Security: Standard encryption (TLC). So this is a legitimate email from Google.
Will this email immediately be sent if someone (who isn’t supposed ...
- 1
1
vote
1
answer
768
views
Does adding a recovery phone number to a Gmail account make it less secure, in the case that I lose both my laptop and phone?
Background
I have a "main" Gmail account, which I set to keep logged in, on my laptop. This "main" Gmail account is important, because it's the email address I used to sign up for ...
- 11
0
votes
0
answers
95
views
I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]
Screenshot:
The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com.
The suspicious link "Unsubscribe_click_here" is:
mailto:cr@burlondesti....
- 101
0
votes
1
answer
3k
views
Can you get virus from previewing email attachments in Gmail?
If an email attachment such as .docx, jpeg, .xls, .pdf, etc. contains virus/malware and if I open it for preview (not opening it in Google Docs or downloading it and opening it) then can I get ...
- 3
1
vote
0
answers
143
views
Understanding Risk-based authentication (Google case) [closed]
I am trying to access my Gmail account. I have the correct password. When I click on login it asks for a confirmation code sent to my recovery email. Hopefully, the recovery email does not have this ...
- 17
3
votes
1
answer
1k
views
Spooky Suspicious Sign-In From My Town
I just had a weird experience that I am trying to figure out. I received a suspicious sign-in notification from google on my gmail account. They had my correct password. This isn't that surprising, ...
10
votes
1
answer
22k
views
How is it possible that this spam mail came from Google Forms without revealing their sender address?
I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the ...
- 319
6
votes
1
answer
44k
views
Received a call from +1 202-455-8888 but I did not attempt to log in to my Gmail
I have enabled multi-factor authentication for my Gmail. When I need to log in to my mail, I should enter an OTP which is sent to my phone number.
I got a call from this number, even though I did not ...
2
votes
1
answer
248
views
How can Google know that a Microsoft e-mail account is "not safe"?
Recently, I was forced to log in to my Gmail account with a browser to keep using it.
Then, Gmail noted that the "alternate e-mail address", my 1999 Hotmail one, which I had long ago ...
- 21
1
vote
1
answer
334
views
Can I consider files compressed with password safe at all?
A follow up to my 7,5 years old question. Back 10-15 years ago, when I wanted to send an executable file over Gmail from my PC, all I had to do was to change file's extension to some meaningless one ...
- 3,619
3
votes
1
answer
2k
views
Does gmail still ignore DKIM if SPF passes, DMARC style?
This blog post from 2016 shockingly implies that gmail will accept an email if either SPF or DKIM passes. We use G suite SMTP servers, therefore SPF provides almost zero protection from spoofing. Is ...
- 33
0
votes
1
answer
1k
views
Can my school look at my search history through Google Chrome if I am logged in through my school account? [duplicate]
I am doing online school at the moment and I am wondering if my school tracks and looks at everything I search just through my school Gmail account. I am on my own network and pc which has never been ...
0
votes
0
answers
190
views
Have I been hacked by a Google employee? [closed]
When using gmail this morning, I got the "Currently being used in other location" warning in the bottom right hand corner:
The details showed 2 different IP addresses accessing my account:
...
- 101
1
vote
1
answer
6k
views
School manages Google accounts, what can they do or see?
My school started using Google Meet for online classes. The accounts we use are managed by them and they told us that they know the IP of the device that we are logging in from. What else can they ...
2
votes
2
answers
295
views
Email sender spoofing check from receiver
I understand there are techniques to prevent someone from spoofing your domain in emails.
Is there any guarantee or check that the receiver can do to ensure the sender is authentic?
Gmail shows TLS ...
0
votes
1
answer
90
views
Spam issue regarding security on gmail app [duplicate]
I have been getting a ton of spam email, so I looked at one of them.
I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do).
...
0
votes
1
answer
351
views
MITM Attack on Gmail's SSL in 2011
I have read these posts: https://www.cnet.com/news/fraudulent-google-certificate-points-to-internet-attack/
https://support.google.com/mail/forum/AAAAK7un8RU3J3r2JqFNTw/?hl=en&gpf=d/category-...
- 127
0
votes
0
answers
167
views
Has this PC been hacked? What's going on?
I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story.
I'm in the UK. The suspect PC runs Win8.1 up to date, ...
- 1,674
1
vote
1
answer
325
views
Can using web-based protocol handlers for protocols such as mailto: links be dangerous in any way?
My question is specifically about an option in Google Chrome under Settings > Site Settings > Handlers. I've read in the past that with desktop-based protocol handlers--such as Office Outlook or ...
- 31
1
vote
2
answers
315
views
Gmail shows my photo after I enter my emaill address (but before my password)
If I have a profile photo associated with a Google account, then when I enter my email address into GMail, but before I enter my password, the photo is shown.
Is there a possible security breach ...
2
votes
1
answer
130
views
Gmail Email id, dot(.) recognition [closed]
I keep on receiving email which is intend to be received by a gmail id similar to be mine, with no dots(.) in gmail id of other party.
For example : my email id is john.grisham@gmail.com
the inbox of ...
- 29
3
votes
1
answer
646
views
Can simply opening an email lead to a hack? [duplicate]
It is common to be wary of links and attachments in emails but I have heard some people say that opening the emails themselves can be risky. Are vulnerabilities that can be exploited simply by opening ...
- 345
1
vote
2
answers
223
views
Does user need to keep updated with the certificates locally when using TLS with smtp?
https://wjianz.wordpress.com/2014/09/03/howto-installconfigure-msmtp-and-mutt-on-ubuntu/
I got GTS CA 1O1 as the common name instead of Google Internet Authority G2. What is the difference between ...
- 133
0
votes
1
answer
445
views
Gmail connected to work computer [duplicate]
On my work computer, I have connected to my personal Gmail account to check my email and go to my drive. At home I use my own personal phone and/or laptop.
Can my employer see what I'm searching and ...
- 1
1
vote
0
answers
132
views
Why I am seeing an email address offending my name? [closed]
When I succeed the username recovery process, I saw a suspicious address i didn't know of. How was this added to my list of known accounts? (see below)
- 11
8
votes
2
answers
2k
views
GMail Hack with 2-Factor Auth enabled
I have my business email on GMail. I use 2-factor authentication for access to said business email. I access my business email from 2 computers and 1 mobile Android device. I do not use Outlook or ...
- 81
-1
votes
1
answer
128
views
Misspelled recipent, same or unique? [closed]
I have x.x@gmail.com as primary email-address, but per accident i sent confidential information to xx@gmail.com (note the dot). How will this be handled?
- 1
0
votes
3
answers
916
views
Is it safe to help a stranger login to gmail using my phone number?
I was assisting a man at the public library who was unable to login to his gmail account. He typed in his password and was prompted for a phone number, presumably so a code to be sent which would then ...
- 103
0
votes
2
answers
3k
views
Google suspicious activity warning persists for 4 days despite my confirming I recognize it, does this indicate additional security issue? [closed]
I had a google suspicious activity warning four days ago triggered by logging in from a location I don't use often. I accepted the offer to view the activity and acknowledged that I recognized it. ...
- 1,415
1
vote
0
answers
131
views
Accessing Gmail if you are the owner of domain that someone else uses
Say Person A (Adam) owns the domain example.com, but is allowing free use of the domain name to his friend, Person B (Bill). As the owner of the domain, Adam logs into his registrar and points the ...
