Questions tagged [gmail]

Gmail is a free e-mail service provided by Google.

Filter by
Sorted by
Tagged with
2 votes
3 answers
568 views

Securing Email: use GPG for all emails?

I am thinking of using GPG to sign commits and particularly to secure emails, and have some questions regarding the usefulness. Basic threat model (I use LESP as abbreviation for large email service ...
user avatar
  • 29
0 votes
0 answers
507 views

"Unknown" device signed into another location Gmail

I'm signed into my gmail account in my browser,and I've noticed that everytime I sign in, when I check the "Last account activity" section at the bottom of the page, I see another session ...
user avatar
0 votes
0 answers
114 views

Stopping a Subscription Bomb

Are there any methods for stopping a subscription bomb other than issuing a new email address? Creating gmail filters is only getting us so far as there are more emails coming in than we can keep up ...
user avatar
  • 11
-1 votes
1 answer
111 views

Does gmail use SPF or DMARC when sending messages outside of gmail?

I can't seem to find any record of SPF or DMARC in the original messages coming from gmail to my mail server. Does gmail use SPF or DMARC when sending messages outside of gmail?
user avatar
1 vote
1 answer
153 views

Is there a way to know when someone tries to guess your gmail password?

Is there a way to check if someone is trying to login to my Gmail account without knowing the password (so they keep trying to guess the password and failing repeatedly or trying to guess the answers ...
user avatar
0 votes
0 answers
96 views

How to detect and prevent phishing attacks on Gmail via Logging and DLP?

We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
user avatar
1 vote
0 answers
368 views

Security concerns over ˆf_bisa label showing up on Gmail [closed]

Gmail started showing an unidentified label/folder ˆf_bisa. Doing a quick check, I see that this has only surfaced within the last couple of days: https://support.google.com/mail/thread/120772882/...
user avatar
  • 739
1 vote
2 answers
205 views

Do fowarded emails retain DMARC protection?

Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
user avatar
-1 votes
2 answers
189 views

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
user avatar
0 votes
0 answers
410 views

If I receive Google verification codes that do not work, is my phone compromised? [duplicate]

I know that something similar has happened to other people before (see for instance here or here), but the situation and the question are slightly different. I wanted to log in to my Gmail account ...
user avatar
  • 101
1 vote
1 answer
120 views

Questionable email from discord [duplicate]

I got a gmail from discord saying a new account had been registered and prompting me to click a verification link. Weirdly, I never made that account, and I already had a discord account under my ...
user avatar
0 votes
1 answer
106 views

Do email providers somehow validate/control "Send email as: " feature?

I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
user avatar
  • 101
0 votes
1 answer
101 views

Account import into gmail - is it considered safe? [closed]

From my Gmail account / settings, I can import another mailing account (for example a Microsoft Exchange account). Then Google asks for my personal Microsoft Exchange password (! this is not very &...
user avatar
24 votes
3 answers
7k views

How is it possible for boss to know I am finding a job?

Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right? I am very very surprised, because : I work ...
user avatar
  • 351
0 votes
1 answer
77 views

Does the e-mail send from an id to the same id requires encryption and other security checks?

I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same). Is encryption really required in the above scenario? Necessity of ...
user avatar
0 votes
0 answers
273 views

Critical security alert: someone knows your password [duplicate]

Mailed-by: gaia.bounces.google.com Sign.google.com Security: Standard encryption (TLC). So this is a legitimate email from Google. Will this email immediately be sent if someone (who isn’t supposed ...
user avatar
  • 1
1 vote
1 answer
451 views

Does adding a recovery phone number to a Gmail account make it less secure, in the case that I lose both my laptop and phone?

Background I have a "main" Gmail account, which I set to keep logged in, on my laptop. This "main" Gmail account is important, because it's the email address I used to sign up for ...
user avatar
0 votes
0 answers
90 views

I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]

Screenshot: The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com. The suspicious link "Unsubscribe_click_here" is: mailto:cr@burlondesti....
user avatar
0 votes
1 answer
1k views

Can you get virus from previewing email attachments in Gmail?

If an email attachment such as .docx, jpeg, .xls, .pdf, etc. contains virus/malware and if I open it for preview (not opening it in Google Docs or downloading it and opening it) then can I get ...
user avatar
  • 3
1 vote
0 answers
128 views

Understanding Risk-based authentication (Google case) [closed]

I am trying to access my Gmail account. I have the correct password. When I click on login it asks for a confirmation code sent to my recovery email. Hopefully, the recovery email does not have this ...
user avatar
  • 17
3 votes
1 answer
529 views

Spooky Suspicious Sign-In From My Town

I just had a weird experience that I am trying to figure out. I received a suspicious sign-in notification from google on my gmail account. They had my correct password. This isn't that surprising, ...
user avatar
10 votes
1 answer
19k views

How is it possible that this spam mail came from Google Forms without revealing their sender address?

I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the ...
user avatar
6 votes
1 answer
30k views

Received a call from +1 202-455-8888 but I did not attempt to log in to my Gmail

I have enabled multi-factor authentication for my Gmail. When I need to log in to my mail, I should enter an OTP which is sent to my phone number. I got a call from this number, even though I did not ...
user avatar
  • 390
2 votes
1 answer
227 views

How can Google know that a Microsoft e-mail account is "not safe"?

Recently, I was forced to log in to my Gmail account with a browser to keep using it. Then, Gmail noted that the "alternate e-mail address", my 1999 Hotmail one, which I had long ago ...
user avatar
  • 21
1 vote
1 answer
254 views

Can I consider files compressed with password safe at all?

A follow up to my 7,5 years old question. Back 10-15 years ago, when I wanted to send an executable file over Gmail from my PC, all I had to do was to change file's extension to some meaningless one ...
user avatar
  • 3,287
3 votes
1 answer
1k views

Does gmail still ignore DKIM if SPF passes, DMARC style?

This blog post from 2016 shockingly implies that gmail will accept an email if either SPF or DKIM passes. We use G suite SMTP servers, therefore SPF provides almost zero protection from spoofing. Is ...
user avatar
0 votes
1 answer
1k views

Can my school look at my search history through Google Chrome if I am logged in through my school account? [duplicate]

I am doing online school at the moment and I am wondering if my school tracks and looks at everything I search just through my school Gmail account. I am on my own network and pc which has never been ...
user avatar
0 votes
0 answers
182 views

Have I been hacked by a Google employee? [closed]

When using gmail this morning, I got the "Currently being used in other location" warning in the bottom right hand corner: The details showed 2 different IP addresses accessing my account: ...
user avatar
  • 101
1 vote
1 answer
5k views

School manages Google accounts, what can they do or see?

My school started using Google Meet for online classes. The accounts we use are managed by them and they told us that they know the IP of the device that we are logging in from. What else can they ...
user avatar
2 votes
2 answers
198 views

Email sender spoofing check from receiver

I understand there are techniques to prevent someone from spoofing your domain in emails. Is there any guarantee or check that the receiver can do to ensure the sender is authentic? Gmail shows TLS ...
user avatar
0 votes
1 answer
83 views

Spam issue regarding security on gmail app [duplicate]

I have been getting a ton of spam email, so I looked at one of them. I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do). ...
user avatar
0 votes
1 answer
271 views

MITM Attack on Gmail's SSL in 2011

I have read these posts: https://www.cnet.com/news/fraudulent-google-certificate-points-to-internet-attack/ https://support.google.com/mail/forum/AAAAK7un8RU3J3r2JqFNTw/?hl=en&gpf=d/category-...
user avatar
  • 117
0 votes
0 answers
163 views

Has this PC been hacked? What's going on?

I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story. I'm in the UK. The suspect PC runs Win8.1 up to date, ...
user avatar
  • 1,664
1 vote
1 answer
228 views

Can using web-based protocol handlers for protocols such as mailto: links be dangerous in any way?

My question is specifically about an option in Google Chrome under Settings > Site Settings > Handlers. I've read in the past that with desktop-based protocol handlers--such as Office Outlook or ...
user avatar
1 vote
2 answers
310 views

Gmail shows my photo after I enter my emaill address (but before my password)

If I have a profile photo associated with a Google account, then when I enter my email address into GMail, but before I enter my password, the photo is shown. Is there a possible security breach ...
user avatar
2 votes
1 answer
117 views

Gmail Email id, dot(.) recognition [closed]

I keep on receiving email which is intend to be received by a gmail id similar to be mine, with no dots(.) in gmail id of other party. For example : my email id is john.grisham@gmail.com the inbox of ...
user avatar
  • 29
3 votes
1 answer
572 views

Can simply opening an email lead to a hack? [duplicate]

It is common to be wary of links and attachments in emails but I have heard some people say that opening the emails themselves can be risky. Are vulnerabilities that can be exploited simply by opening ...
user avatar
1 vote
2 answers
209 views

Does user need to keep updated with the certificates locally when using TLS with smtp?

https://wjianz.wordpress.com/2014/09/03/howto-installconfigure-msmtp-and-mutt-on-ubuntu/ I got GTS CA 1O1 as the common name instead of Google Internet Authority G2. What is the difference between ...
user avatar
0 votes
1 answer
323 views

Gmail connected to work computer [duplicate]

On my work computer, I have connected to my personal Gmail account to check my email and go to my drive. At home I use my own personal phone and/or laptop. Can my employer see what I'm searching and ...
user avatar
  • 1
1 vote
0 answers
131 views

Why I am seeing an email address offending my name? [closed]

When I succeed the username recovery process, I saw a suspicious address i didn't know of. How was this added to my list of known accounts? (see below)
user avatar
  • 11
8 votes
2 answers
1k views

GMail Hack with 2-Factor Auth enabled

I have my business email on GMail. I use 2-factor authentication for access to said business email. I access my business email from 2 computers and 1 mobile Android device. I do not use Outlook or ...
user avatar
-1 votes
1 answer
127 views

Misspelled recipent, same or unique? [closed]

I have x.x@gmail.com as primary email-address, but per accident i sent confidential information to xx@gmail.com (note the dot). How will this be handled?
user avatar
  • 1
0 votes
3 answers
594 views

Is it safe to help a stranger login to gmail using my phone number?

I was assisting a man at the public library who was unable to login to his gmail account. He typed in his password and was prompted for a phone number, presumably so a code to be sent which would then ...
user avatar
0 votes
2 answers
3k views

Google suspicious activity warning persists for 4 days despite my confirming I recognize it, does this indicate additional security issue? [closed]

I had a google suspicious activity warning four days ago triggered by logging in from a location I don't use often. I accepted the offer to view the activity and acknowledged that I recognized it. ...
user avatar
  • 1,375
1 vote
0 answers
131 views

Accessing Gmail if you are the owner of domain that someone else uses

Say Person A (Adam) owns the domain example.com, but is allowing free use of the domain name to his friend, Person B (Bill). As the owner of the domain, Adam logs into his registrar and points the ...
user avatar
7 votes
3 answers
35k views

Unknown automatically generated email in sent folder

I just noticed a strange email in my sent folder that I did not send. Here is the header information: To: 5f3d36eb61801dda4063@cloudmailin.net From: ********@gmail.com Date: Mon, 10 Jun 2019 06:54:17 ...
user avatar
  • 173
2 votes
0 answers
931 views

Different email address in the email and the cancellation link in "Security alert for your linked Google Account" [closed]

In order to be able to help my mother, my gmail is listed as a recovery email for her Google account, mother@gmail.com (not her actual address). Today I received a "Security alert for your linked ...
user avatar
  • 121
1 vote
1 answer
321 views

Gmail Question - Bypassing alerts

Is it easy to access someone's gmail account without having that alert pop up to warn the owner? So, for example, with gmail, if you log in somewhere different from your usual login, it alerts you ...
user avatar
  • 125
1 vote
1 answer
112 views

What accounts for file accessed immediately after including link in Gmail?

Less than 60 seconds after sending an email w/ Gmail that contained a pasted https link to a .zip file, that file was accessed by two non-Google servers. Neither server belongs to the email recipient. ...
user avatar
  • 111
10 votes
2 answers
5k views

Is it possible to get infected by opening an email in Android Gmail app?

I just received an email from an unknown person, titled "da vinci" and containing a docx file with the same name. Not suspicious at all, right? I have not opened or downloaded the file, but: The ...
user avatar
  • 203

1
2 3 4 5