Questions tagged [gmail]

Gmail is a free e-mail service provided by Google.

Filter by
Sorted by
Tagged with
0
votes
1answer
141 views

School manages Google accounts, what can they do or see?

My school started using Google Meet for online classes. The accounts we use are managed by them and they told us that they know the IP of the device that we are logging in from. What else can they ...
1
vote
2answers
60 views

Email sender spoofing check from receiver

I understand there are techniques to prevent someone from spoofing your domain in emails. Is there any guarantee or check that the receiver can do to ensure the sender is authentic? Gmail shows TLS ...
0
votes
1answer
38 views

Spam issue regarding security on gmail app [duplicate]

I have been getting a ton of spam email, so I looked at one of them. I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do). ...
0
votes
1answer
75 views

MITM Attack on Gmail's SSL in 2011

I have read these posts: https://www.cnet.com/news/fraudulent-google-certificate-points-to-internet-attack/ https://support.google.com/mail/forum/AAAAK7un8RU3J3r2JqFNTw/?hl=en&gpf=d/category-...
0
votes
0answers
118 views

Has this PC been hacked? What's going on?

I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story. I'm in the UK. The suspect PC runs Win8.1 up to date, ...
0
votes
0answers
35 views

How to efficiently deploy SMIME email certificates for entire domain with Google GSuite?

Google Suite Enterprise supports centralized SMIME email signatures. This allows for easy deployment across all devices. But besides an API, there's apparently no central management. And I couldn't ...
1
vote
0answers
51 views

Can using web-based protocol handlers for protocols such as mailto: links be dangerous in any way?

My question is specifically about an option in Google Chrome under Settings > Site Settings > Handlers. I've read in the past that with desktop-based protocol handlers--such as Office Outlook or ...
1
vote
1answer
89 views

Does user need to keep updated with the certificates locally when using TLS with smtp?

https://wjianz.wordpress.com/2014/09/03/howto-installconfigure-msmtp-and-mutt-on-ubuntu/ I got GTS CA 1O1 as the common name instead of Google Internet Authority G2. What is the difference between ...
66
votes
2answers
18k views

Why does Gmail (add accounts) using SMTP server recommend SSL instead of TLS?

I stumbled something interesting today when I was adding an account to my gmail one. Why is SSL boldly stated as recommended when TLS supersedes SSL? The links for SSL and TLS is the same: https://...
1
vote
2answers
256 views

Gmail shows my photo after I enter my emaill address (but before my password)

If I have a profile photo associated with a Google account, then when I enter my email address into GMail, but before I enter my password, the photo is shown. Is there a possible security breach ...
21
votes
3answers
18k views

How is Gmail susceptible to brute-force attacks?

In the Atlantic article "Hacked!" it says: My wife’s password was judged as “strong” when she first chose it for use with Gmail. But it was a combination of two short English words followed by ...
7
votes
3answers
13k views

Unknown automatically generated email in sent folder

I just noticed a strange email in my sent folder that I did not send. Here is the header information: To: 5f3d36eb61801dda4063@cloudmailin.net From: ********@gmail.com Date: Mon, 10 Jun 2019 06:54:17 ...
0
votes
1answer
139 views

Shmishing scam that targets Gmail access

I'm looking for information on scams that target GMail users. I believe I found an article that discusses the attack in the context of bank fraud at Warning over text message scam that allowed '...
2
votes
1answer
71 views

Gmail Email id, dot(.) recognition [closed]

I keep on receiving email which is intend to be received by a gmail id similar to be mine, with no dots(.) in gmail id of other party. For example : my email id is john.grisham@gmail.com the inbox of ...
3
votes
1answer
221 views

Why are my emails going to spam?

I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
1
vote
1answer
1k views

Is Android Gmail app susceptible to MITM, sslstrip? If yes, how?

My scenario: I connected to an open WiFi at Kuala Lumpur Airport to read a news site from home (I know I was being absolutely careless). I forgot to turn off sync on my Android phone, so all my apps "...
3
votes
1answer
247 views

Can simply opening an email lead to a hack? [duplicate]

It is common to be wary of links and attachments in emails but I have heard some people say that opening the emails themselves can be risky. Are vulnerabilities that can be exploited simply by opening ...
0
votes
1answer
102 views

Gmail connected to work computer [duplicate]

On my work computer, I have connected to my personal Gmail account to check my email and go to my drive. At home I use my own personal phone and/or laptop. Can my employer see what I'm searching and ...
8
votes
2answers
1k views

GMail Hack with 2-Factor Auth enabled

I have my business email on GMail. I use 2-factor authentication for access to said business email. I access my business email from 2 computers and 1 mobile Android device. I do not use Outlook or ...
1
vote
0answers
91 views

Why I am seeing an email address offending my name? [closed]

When I succeed the username recovery process, I saw a suspicious address i didn't know of. How was this added to my list of known accounts? (see below)
-1
votes
1answer
84 views

Misspelled recipent, same or unique? [closed]

I have x.x@gmail.com as primary email-address, but per accident i sent confidential information to xx@gmail.com (note the dot). How will this be handled?
7
votes
5answers
4k views

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
6
votes
2answers
7k views

How is ZixCorp able to provide email encryption without a password?

I am trying to understand how/if an email I received is being encrypted. A financial institution sent me a verifiable email (i.e. not phising) asking me to fill out a pdf form to complete a ...
7
votes
2answers
224 views

Are all Google app-passwords equal? What is their attack scope?

Upon setting up app-passwords, Google sends a mail: This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
0
votes
3answers
320 views

Is it safe to help a stranger login to gmail using my phone number?

I was assisting a man at the public library who was unable to login to his gmail account. He typed in his password and was prompted for a phone number, presumably so a code to be sent which would then ...
16
votes
5answers
50k views

Can the recipient of my emails know my IP address?

When I send out emails using Gmail, is my IP address being recorded? Can the recipient of my Gmail message know my IP address and thus infer where I am located?
5
votes
3answers
2k views

Two-factor verification without a mobile phone?

Currently, some services use a second layer of veficiation if logging in from a new device: Gmail and Facebook send a text or call with a code Facebook generates a code in the mobile application ...
0
votes
2answers
737 views

Google suspicious activity warning persists for 4 days despite my confirming I recognize it, does this indicate additional security issue? [closed]

I had a google suspicious activity warning four days ago triggered by logging in from a location I don't use often. I accepted the offer to view the activity and acknowledged that I recognized it. ...
1
vote
0answers
87 views

Accessing Gmail if you are the owner of domain that someone else uses

Say Person A (Adam) owns the domain example.com, but is allowing free use of the domain name to his friend, Person B (Bill). As the owner of the domain, Adam logs into his registrar and points the ...
10
votes
3answers
9k views

How to prove my Gmail has been hacked?

I believed that someone had hacked my Gmail because they were using information contained within my emails in an attempt to try to convince me that they were psychic. I told them that I didn't believe ...
4
votes
1answer
478 views

Using a gmail oath2 token to access web email

I forgot my password to an old gmail account. I have tried the regular route of going through gmail password recovery: answering questions, it keeps looping back to the questions, so I think I'm ...
2
votes
0answers
373 views

Different email address in the email and the cancellation link in “Security alert for your linked Google Account” [closed]

In order to be able to help my mother, my gmail is listed as a recovery email for her Google account, mother@gmail.com (not her actual address). Today I received a "Security alert for your linked ...
1
vote
1answer
116 views

Gmail Question - Bypassing alerts

Is it easy to access someone's gmail account without having that alert pop up to warn the owner? So, for example, with gmail, if you log in somewhere different from your usual login, it alerts you ...
4
votes
5answers
9k views

How exactly does Google Account decide my device or location is “familiar”?

In Chrome, I delete all cookies and site data. I close the browser and re-open it. I double check that All Cookies and Site Data is a blank list. I type https://mail.google.com/ into the address bar....
1
vote
1answer
73 views

What accounts for file accessed immediately after including link in Gmail?

Less than 60 seconds after sending an email w/ Gmail that contained a pasted https link to a .zip file, that file was accessed by two non-Google servers. Neither server belongs to the email recipient. ...
10
votes
2answers
2k views

Is it possible to get infected by opening an email in Android Gmail app?

I just received an email from an unknown person, titled "da vinci" and containing a docx file with the same name. Not suspicious at all, right? I have not opened or downloaded the file, but: The ...
1
vote
1answer
996 views

Are emails from ProtonMail to Tutanota end-to-end encrypted?

So I know that sending emails from a ProtonMail Email to a ProtonMail email is end-to-end encrypted. And I know that sending emails from a Tutanota Email to a Tutanota email is end-to-end encrypted. I ...
2
votes
1answer
2k views

Should I be worried by an email which said my account was under attack? [duplicate]

So, today I received an email in my Gmail account which landed automatically in the spam folder. This was the email content: Hi! As you may have noticed, I sent you an email from your account. ...
3
votes
1answer
6k views

Receiving S/MIME signed emails with Gmail

When I receive an email signed (not encrypted) with S/MIME in my Gmail account, it provides me no option of verifying the signature when I'm using the webmail interface. Which is fine, I have made ...
2
votes
0answers
87 views

Gmail (Dot) Phishing Attack From Avalanche Botnet

I'm a full-stack web developer working in a small startup and have been wearing many hats as a result. I am by no means a cyber or information security expert. I'm looking for a general evaluation of ...
0
votes
1answer
51 views

Gmail Contact List Safety

How can I know that my Gmail is spoofed or sending spams to other people I sent email to them before? I don't have clear signs of that especially my contact list is empty but I'm afraid this may ...
0
votes
2answers
80 views

How to find the source of business email account compromise

I have a gmail account example@gmail.com and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees. ...
3
votes
1answer
534 views

How does AVG insert its signature into Gmail emails?

I just sent an email from gmail loaded in my Chrome web browser. Also on the Windows 7 computer is AVG "anti-virus". Turns out AVG somehow managed to insert a signature into the email I sent out. ...
1
vote
1answer
922 views

How would google know someone has the password for my web host email?

I received a confusing email from Google today. It had the subject 'Critical security alert' and the body said in part 'Google has become aware that someone else knows your password, and we've taken ...
1
vote
2answers
156 views

How can you use the information from Gmail's “Show Original” feature to check if an email really came from Google?

I received an email saying that someone logged into my Gmail account from an unknown device. How can I verify that this email (security alert) actually came from Google and not from a malicious source?...
1
vote
2answers
2k views

It's still possible to email spoofing to Google

I would like to know if it's still possible to spoof an address from, for example, no-reply@company.com when sending to Gmail. I've tried sending a spoofed e-mail to other mail service and it performs ...
1
vote
1answer
101 views

Lock gmail access from a smartphone

A friend has broken his smartphone. It has (at least) three security issues: It is not protected by any PIN, password or fingerprint It automaticaly access gmail (I'm not sure if he just rememberd ...
1
vote
0answers
55 views

How to enforce E-mail Account Security with regards to Custom Domains & 2FA?

Lately I've been bothered by the fact that should one of my e-mail accounts be in some way compromised despite its long and randomized password phrase. I'd have hell to pay since it is effectively a ...
0
votes
2answers
139 views

Spoofed email has appropriate alias but unknown email

My wife received a suspicious email where the "FROM" field contained my name, but the email appeared to be delivered from an E-Mail address that we do not recognize. The fact that the email used my ...
0
votes
2answers
229 views

Find the person behind an email address using its recovery email in Gmail

Note: This is based on a true story! The Story: Alice and Bob are good friends and each one knows the personal email address of the other person and they contact with each other using it. Let's ...