Email Is Dangerous (Article)

Discussion in 'privacy technology' started by ronjor, May 21, 2018.

  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,191
    Location:
    Texas
    Quinn Norton
     
  2. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Yahoo was worse back in the day. Gmail is showing an increase of crap lately on this end but is easily noticed and dismissed if you're a throwback who seen this rodeo a million times over before.
     
  3. kls490

    kls490 Registered Member

    Joined:
    Aug 15, 2015
    Posts:
    60
    Location:
    Mid Atlantic Region (USA)
    I've noticed a significant increase in the amount of spam and phishing emails coming into one of my Cox Communications Email accounts - almost on a daily basis, since they overhauled their email platform.

    From what I see in the source code of those emails, the cretins sending them are altering the domain names slightly, as well as, changing the part of the Sender name before the "@" symbol. Cox's spam filters don't seem to do such a good job anymore.

    The others, i.e., Gmail, Outlook, Yahoo, etc .haven't become much of a problem......YET!
     
  4. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Mirimir gets virtually no spam :)
     
  5. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,224
    Saying email is dangerous is like saying cars or food are dangerous. It's just technology.
    We've merely transposed an analog issue from ancient times onto the digital world.
    Trying to solve the inherent issues with human trust cannot be fixed by software.
    Mrk
     
  6. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    Palancar either. However; my "real name" accounts do see some. Almost none in Gmail, but quite a few with Microsoft accounts (I do use them for more flaky things though). Everything except saved contacts goes directly and immediately into junk/spam so its only an annoyance not a security risk.
     
  7. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    I've wondered about this. Back in the day, years ago, I was getting hundreds of spam per day.

    So is there just less spam now? Or is it getting dropped in mail server networks?

    If it's that, there's also the risk that other messages are getting dropped through misclassification.
     
  8. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,010
    Location:
    Member state of European Union
    There are technologies like dmarc to authenticate sending server.
     
  9. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Right, and some major mail servers ignore sources with poor or unknown reputations. Which is why it's nontrivial to run your own mail server.
     
  10. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    3,440
    Location:
    Slovakia
    I am not ready to send my savings to Nigerian prince as for malware threats, I open all emails in txt and I open attachments from trusted sources only.
     

    Attached Files:

  11. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Yeah, me too :) No HTML, and no external content fetched.

    I got a strange one yesterday. Makes me wonder about Efail.

    In Thunderbird text mode, "----DMMAwGuf 1hTVhVG5 OI0QBVgA ... cROBNJ3k q9IZYLZM rP0GExKW RS----" appears as the message header. Where an image might normally be.

    The body is:
    And the relevant HTML snippets are:
    Code:
    <div style=3D"display:none;"><span style=3D"font-size:0px;line-height:0px;color:white;background-color:white;">----DMMAwGuf 1hTVhVG5 OI0QBVgA ... cROBNJ3k q9IZYLZM rP0GExKW RS----=0A=0A<br><br></span>
    Code:
    <div style=3D"display:none;"><span style=3D"font-size:0px;line-height:0px;color:white;background-color:white;">----iAmobekE x8fPP99r k7BqbiXj ... 3zlX0bTK oPoV8ioK 6J5dAT----</span>
    It might just be screwed-up text-encoded images. But then why would they do "display:none;" and "font-size:0px;line-height:0px;color:white;background-color:white;" to attempt hiding the text?

    Anyway, I'm curious enough that I'll put the HTML in a LiveCD VM with no network connection, and see what Firefox does with it :)
     
  12. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    Yes Gmail's spam filter is still pretty bad. Strangely enough, since switching to the new Yahoo Mail interface, I get a lot less spam.
     
  13. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,010
    Location:
    Member state of European Union
    It was never trivial, because of decentralized and modularized nature of email infrastructure. But it is doable for one person to set up and maintain mail services for him or her company using open-source software.
     
  14. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Free does what free is. Since they are free, we have to expect so slag like spam and at least we can always shift it to TRASH or REPORT SPAM to curtail most of it.

    Problem is all that junk is so silly stupid to be allowed in the first place by a multi-trillion-billion dollar tech giant. :D
     
  15. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    What's nontrivial is getting Google etc to accept it.
     
  16. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,241
    Location:
    Among the gum trees
    I received this email today. First spam for a long time.
     

    Attached Files:

  17. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,010
    Location:
    Member state of European Union
    It is reasonable to mark e-mails sent from poor-reputation domains as spam. I don't encountered problems with sending e-mails from properly set up servers with unknown reputation, so I think you made up this part.
    Properly set up smtp server with de-facto standard mechanisms for e-mails server authentication such as valid reverse DNS records, SPF record etc is enough. Read more here: https://support.google.com/mail/answer/81126?hl=en
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.