Collaborate Disseminate
I have a Gmail account that uses POP to download emails from a GWS (Google Workspace) inbox, effectively another Gmail account.
In order for this to work, I had to turn on LSA (Less Secure App) for that GWS account.
Now Google is ending L… Continue reading Googles shutting down LSA and its effect on Gmail IMAP/POP [migrated]
As an experiment, I attempted to setup a CNAME for mail.mydomain.com pointing to mail.myisp.com, and using mail.mydomain.com instead of mail.myisp.com in setting up email clients connecting to that using TLS (aka SSL) for IMAP/POP/SMTP
One… Continue reading CNAME redirection and certificate
Recently I started receiving "Third-party application access to your Zoho Account" warning emails from Zoho.com regarding my Zoho email accounts, saying things like:
We noticed a third-party application(POP) accessed your Zoho A… Continue reading Who is accessing my pop3 email accounts? [closed]
logcheck fished out some suspicious log records for me:
May 11 15:50:50 mailserver dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=1.2.3.4, lip=10.0.0.1, TLS handshaking: SSL_accept() failed: error:1408F… Continue reading Do such network events indicate attack attempts? [closed]
Bob sent an email to Alice with nothing much useful and tenuous ( but because it isn’t useful it can ruin Bob’s reputation if bad Alice decide to publish. )
Is there a way for Bob to include a suicide-after-a-specified-time… Continue reading Email including self-shredding macro after "Seen" flag is set
I found a domain with open POP3 (110) and IMAP (143) ports. I was able to use TELNET to connect to them successfully, but beyond this is there any common vulnerability/exploit I should test on them, or is this even a security… Continue reading Risks in open POP3/IMAP ports?
When I log in to hotmail or Google or posteo I can only log in using the 2FA that I have set up. However, each provider seems to have an alternative for apps that do not auth via a web client.
Hotmail/Google: 16-lowercase-c… Continue reading Does IMAP/POP3/ASP undermine Two-Factor Auth?
SMTPS (implicit SSL) has been deprecated/obsolete since SMTP+STARTTLS (explicit SSL) was defined in RFC2487. I’m not entirely clear on the reasoning behind that, but it was clearly considered a good idea at the time.
Which offers a higher level of safety: Webmail or using a POP3/IMAP client?
Assume the following for webmail:
Access via HTTPS
Rarely downloading any attachments, but in cases where it may be necessary, carefully verifying the integrity… Continue reading Better safety: Webmail or POP3/IMAP email client?
The abundance of small networked boards running Linux — like the Raspberry Pi — is a boon for developers. It is easy enough to put a small cheap computer on the network. The fact that Linux has a lot of software is a double-edged sword. On the one hand, it is a good bet that anything you want to do has been done. On the other hand, some of the solutions are a bit large for a tiny embedded system.
Take, for example, e-mail. Historically, Linux hosts operate as mail transfer agents that can send and receive mail for all …read more
