Donate to Remove ads

Got a credit card? use our Credit Card & Finance Calculators

Thanks to johnstevens77,Bhoddhisatva,scotia,Anonymous,Cornytiv34, for Donating to support the site

Email

Seek assistance with all types of tech. - computer, phone, TV, heating controls etc.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#304939

Postby Infrasonic » May 1st, 2020, 9:50 pm

https://www.zdnet.com/article/new-firef ... ine-forms/
Browser maker Mozilla is working on a new service called Private Relay that generates unique aliases to hide a user's email address from advertisers and spam operators when filling in online forms.

The service entered testing last month and is currently in a closed beta, with a public beta currently scheduled for later this year, ZDNet has learned.

Private Relay will be available as a Firefox add-on that lets users generate a unique email address -- an email alias -- with one click

Cont.

If you just want a disposable rather than an alias there is...https://10minutemail.com/

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#304942

Postby Infrasonic » May 1st, 2020, 10:16 pm

https://www.theregister.co.uk/2020/04/3 ... p_leakage/
Quibi, JetBlue, Wish, others accused of leaking millions of email addresses to ad orgs via HTTP referer headers.
Cont.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#307628

Postby Infrasonic » May 11th, 2020, 2:36 pm

ping@tools.mxtoolbox.com is another useful tool, just send a blank email and follow the reply to a deliverability report for your domain.
https://blog.mxtoolbox.com/2019/05/30/4142/

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#323546

Postby Infrasonic » July 3rd, 2020, 3:56 pm

https://techcrunch.com/2020/07/03/have- ... 1593787443

When Troy Hunt launched Have I Been Pwned in late 2013, he wanted it to answer a simple question: Have you fallen victim to a data breach?

Seven years later, the data-breach notification service processes thousands of requests each day from users who check to see if their data was compromised — or pwned with a hard ‘p’ — by the hundreds of data breaches in its database, including some of the largest breaches in history. As it’s grown, now sitting just below the 10 billion breached-records mark, the answer to Hunt’s original question is more clear.
Cont.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#328596

Postby Infrasonic » July 25th, 2020, 11:03 am

https://www.gizmodo.co.uk/2020/07/googl ... urb-scams/
As part of a series of security updates to G Suite announced this week, Google says it’s piloting a new standard for email authentication that will display a company or brand icon next to email that Google has verified as legit – a measure that may help curb phishing and other malicious activity from bad actors.

With the Brand Indicators for Message Identification standard...
Cont.

https://bimigroup.org/

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#338397

Postby Infrasonic » September 5th, 2020, 5:17 pm

This might be of interest to people who have to deal with a lot of email.
https://hey.com/
https://hey.com/features/
https://hey.com/faqs/

Not sure about its GDPR compliance, so it might not be suitable for public sector organisations or businesses that need strict adherence.

Twitter is... @heyhey and email is... support@hey.com

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#338546

Postby Infrasonic » September 6th, 2020, 1:20 pm

Spam volumes.

I have one account (my oldest Hotmail from 1998) that gets high volumes of spam, partly due to being compromised in a few email address database leaks many years ago, confirmed by HIBP...https://haveibeenpwned.com/
(No password leak issues though thankfully.)

A few months back it went to zero for some time after MS did some drastic updating of their email infrastructure (which also caused loads of issues for genuine email not being delivered, covered at the start of this thread, which I was also a victim of on another business account).

Gradually the odd spam email started to appear and my usual habit is to report it all as phishing. I'd maxed out my address block list so I cleared it completely and started to add certain domains that were occurring repeatedly. The spam volumes went up noticeably almost immediately, odd.

So on a hunch I've deleted all address blocks and stopped reporting any spam as phishing.
All I do now is empty the 'Junk Email' folder, nothing else.

For the past week with that in place the spam volumes have gone right down again, which leads me to believe the spammers may be using NDR/bounces as a way of auto confirming active account management and then auto targeting those accounts even more with new sent from addresses.

Bearing in mind how many hundreds of millions of zombie email accounts there are in the world that would make sense operationally.
Also the old methods of confirming active accounts, active content, HTML, single pixels, graphics et al have pretty much been eliminated by the default settings for inboxes/junk folders blocking them (unless overridden and specifically allowed by the user).

All anecdotal of course as I don't know exactly how MS operate their email infrastructure, black box(ish) being pretty much a requirement for security reasons.

It would be interesting if anyone else could run the same experiments and see if they get a similar result though, as if its valid 'doing nothing' might actually be the best policy to reduce spam!

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#445595

Postby Infrasonic » September 27th, 2021, 1:32 pm

https://www.zdnet.com/article/cloud-bas ... d-to-know/

Cloud-based email services: Everything you need to know
Here's a compilation of facts to see before selecting a cloud-based email service--and you may not know everything you need to know.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#445609

Postby Infrasonic » September 27th, 2021, 2:04 pm

Infrasonic wrote:So on a hunch I've deleted all address blocks and stopped reporting any spam as phishing.
All I do now is empty the 'Junk Email' folder, nothing else.


Just a FYI update on this.

Report as phishing doesn't make any difference, blocking domains however...

I accidentally blocked a domain that was spamming me the other week and immediately started receiving bulk spam from what turned out to be a Google Group (from the message source headers).

It seems that if you block you can get auto signed up to other spam groups (probably from the NDR's) - in this case I traced it to my main Google address and on logging in to Google Groups found the miscreant spammer - the group was only four days old. Reported the account for spam abuse and it stopped within a couple of hours.

Worryingly it seems the default setting on Google Groups allows for you to be added as a member without your express permission and I received no alert email. I've subsequently changed this on all Google accounts/addresses so now I can't be signed up without an invitation email being sent and me physically approving. I set up a test group with my own Gmail addresses to see if I could duplicate the spammers MO but couldn't - so I presume they are taking advantage of some bug in the API that lets addresses be added without an alert email being sent out.

If you have Google accounts/addresses I strongly suggest you log into Google Groups and change the default setting to stop yourself being auto added to groups.

I also note that the recent Pegasus phone hacking/spyware debacle was making use of Google Groups.

It's an issue across the board with the big players AWS/Azure/Google, a nice fully certificated environment that makes it easier for cybercrims to operate - even if only briefly.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#446233

Postby Infrasonic » September 29th, 2021, 11:22 am

https://www.theregister.com/2021/09/27/ ... odiscover/

Microsoft Exchange clients like Outlook have been supplying unprotected user credentials if you ask in a particular way since at least 2016. Though aware of this, Microsoft's advice continues to be that customers should communicate only with servers they trust.

On August 10, 2016, Marco van Beek, managing director at UK-based IT consultancy Supporting Role, emailed the Microsoft Security Response Center to disclose an Autodiscover exploit that worked with multiple email clients, including Microsoft Outlook...
Cont.

Five years on
Last week, security firm Guardicore offered its take on the problem with the Autodiscover protocol, explaining that the "back off" mechanism for resolving domain names makes it trivial to set up servers on Autodiscover TLDs to intercept hundreds of thousands of credential transmissions from systems that haven't been properly secured...
Cont.

Also covered by Security Now pages 9-15 of the shownotes PDF...https://t.co/YSmq8U7fWH?amp=1
YouTube show...https://www.youtube.com/watch?v=MonvF8LnjLg 1:16:40 in.

chas49
Lemon Quarter
Posts: 1935
Joined: November 4th, 2016, 10:25 am
Has thanked: 216 times
Been thanked: 457 times

Re: Email

#446268

Postby chas49 » September 29th, 2021, 1:20 pm

Infrasonic wrote:Worryingly it seems the default setting on Google Groups allows for you to be added as a member without your express permission and I received no alert email. I've subsequently changed this on all Google accounts/addresses so now I can't be signed up without an invitation email being sent and me physically approving. I set up a test group with my own Gmail addresses to see if I could duplicate the spammers MO but couldn't - so I presume they are taking advantage of some bug in the API that lets addresses be added without an alert email being sent out.

If you have Google accounts/addresses I strongly suggest you log into Google Groups and change the default setting to stop yourself being auto added to groups.


Thanks for this. I eventually managed to find where Google Groups is (I couldn't see it ony page of different Google products, so I googled it)! It's at https://groups.google.com/my-groups.

The setting (gear icon, global settings) was - as you say - set to allow me to be added to any group. Fortunately I haven't been - and now (I hope) I can't be without me accepting an invitation.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#446337

Postby Infrasonic » September 29th, 2021, 4:21 pm

chas49 wrote:Thanks for this. I eventually managed to find where Google Groups is (I couldn't see it ony page of different Google products, so I googled it)! It's at https://groups.google.com/my-groups.

The setting (gear icon, global settings) was - as you say - set to allow me to be added to any group. Fortunately I haven't been - and now (I hope) I can't be without me accepting an invitation.


I had the same problem finding Groups initially and I wouldn't be surprised if that was the attraction in the first place to the spammers - a nice little online backwater that even if you find them in the message source headers many won't get the ramifications immediately. The penny didn't fully drop for me until I logged in and saw what the issue was!

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#453410

Postby Infrasonic » October 26th, 2021, 11:06 pm

https://www.swissinfo.ch/eng/business/p ... s/47052196


A Swiss court has upheld the appeal of Geneva-based Proton, a provider of secure and anonymous email services, limiting its obligation to monitor traffic and retain data for surveillance purposes...
Cont.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#464957

Postby Infrasonic » December 11th, 2021, 11:04 am

Just as an FYI Protonmail currently have a 30 day offer to double the capacity of your free inbox from 500MB to 1GB.

You have to send an email, import some data from another account (emails/contacts/calendar), install and log in with the mobile app and set up a recovery method (email and/or phone number).

I don't know for sure but I doubt if you deleted any imported data after getting the upgrade they'll rescind the extra inbox capacity...

I've got a couple of free accounts with them and have just upgraded - 500MB is a bit tight especially if you receive a lot of attachments.

They also do a free limited features VPN and Calendar and have a Beta cloud storage offering for paid. All services are encrypted and if you correspond with another Protonmail user it is automatically E2EE both ways without having to mess with PGP keys (which you can also configure for external E2EE correspondence).

GrahamPlatt
Lemon Quarter
Posts: 2059
Joined: November 4th, 2016, 9:40 am
Has thanked: 1032 times
Been thanked: 823 times

Re: Email

#465020

Postby GrahamPlatt » December 11th, 2021, 3:02 pm

Infrasonic wrote:Just as an FYI Protonmail currently have a 30 day offer to double the capacity of your free inbox from 500MB to 1GB.

You have to send an email, import some data from another account (emails/contacts/calendar), install and log in with the mobile app and set up a recovery method (email and/or phone number).

I don't know for sure but I doubt if you deleted any imported data after getting the upgrade they'll rescind the extra inbox capacity...

I've got a couple of free accounts with them and have just upgraded - 500MB is a bit tight especially if you receive a lot of attachments.

They also do a free limited features VPN and Calendar and have a Beta cloud storage offering for paid. All services are encrypted and if you correspond with another Protonmail user it is automatically E2EE both ways without having to mess with PGP keys (which you can also configure for external E2EE correspondence).


Interesting, as I have been a user for about a year now - just a free account but thinking I will eventually upgrade to paid for. But I have had no notification of this offer, and can’t find it with an online search.

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#465028

Postby Infrasonic » December 11th, 2021, 3:43 pm

GrahamPlatt wrote:
Infrasonic wrote:Just as an FYI Protonmail currently have a 30 day offer to double the capacity of your free inbox from 500MB to 1GB.

You have to send an email, import some data from another account (emails/contacts/calendar), install and log in with the mobile app and set up a recovery method (email and/or phone number).

I don't know for sure but I doubt if you deleted any imported data after getting the upgrade they'll rescind the extra inbox capacity...

I've got a couple of free accounts with them and have just upgraded - 500MB is a bit tight especially if you receive a lot of attachments.

They also do a free limited features VPN and Calendar and have a Beta cloud storage offering for paid. All services are encrypted and if you correspond with another Protonmail user it is automatically E2EE both ways without having to mess with PGP keys (which you can also configure for external E2EE correspondence).


Interesting, as I have been a user for about a year now - just a free account but thinking I will eventually upgrade to paid for. But I have had no notification of this offer, and can’t find it with an online search.


I saw it via Twitter and was intrigued - I think they might be offering it selectively then based on account age/usage. I haven't got offered it yet on my oldest free account but did on two relatively new ones that I hadn't really used much. When I followed the required process they got their inboxes upgraded to 1GB.
If you see a little red present box logo down by the inbox capacity display bottom left then you can get it.


https://protonmail.com/blog/get-started-ma/

Here's the confirmation email.

Dear Proton community member,

Congratulations on completing a major step of your journey to digital privacy! You've successfully:

Imported emails and contacts

Sent your first message

Set up a recovery method

Used our mobile app

To help you store even more emails and attachments, we've upgraded your account storage to 1 GB.
Ready for more? Consider upgrading to a paid plan to unlock premium features, such as:

Additional storage
Multiple email addresses
Unlimited labels and folders
Custom email domains
Custom filters
Priority support
Upgrade now
At Proton, our mission is to build an internet that provides privacy, security, and freedom for everyone. Thank you for being a valuable member of the Proton community.

We appreciate your support!
The Proton Team


If they don't extend this to older accounts they may succumb to pressure if we all email them to complain. ;)

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#467255

Postby Infrasonic » December 19th, 2021, 12:59 pm

My oldest Protonmail account got upgraded last night, don't know why there was such a delay but at least they are honouring the inbox offer with all the free accounts, not selectively just for new ones as I feared upthread.

GrahamPlatt
Lemon Quarter
Posts: 2059
Joined: November 4th, 2016, 9:40 am
Has thanked: 1032 times
Been thanked: 823 times

Re: Email

#467292

Postby GrahamPlatt » December 19th, 2021, 3:05 pm

Infrasonic wrote:My oldest Protonmail account got upgraded last night, don't know why there was such a delay but at least they are honouring the inbox offer with all the free accounts, not selectively just for new ones as I feared upthread.


Yes, I noticed the gift-box icon today & have duly upgraded.
Thanks for the heads-up, because I probably wouldn’t have noticed it otherwise (still had no word from pm about it).

Infrasonic
Lemon Quarter
Posts: 4479
Joined: November 4th, 2016, 2:25 pm
Has thanked: 644 times
Been thanked: 1260 times

Re: Email

#488901

Postby Infrasonic » March 24th, 2022, 3:23 pm

https://protonmail.com/blog/2022-roadmap/


...At Proton, our mission is to create a better internet where privacy is the default. Our applications provide strong protection for your privacy and personal data and allow you to access information online. We are committed to our mission and continue to expand our ecosystem so that we can serve more people wherever and however they communicate online.

In January, we previewed our 2022 roadmap. In this post, we’re sharing a progress update with more detail on some of the upcoming releases...


Return to “Technology - Computers, TV, Phones etc.”

Who is online

Users browsing this forum: No registered users and 13 guests