Questions tagged [gmail]
Gmail is a free e-mail service provided by Google.
236 questions
0
votes
0
answers
42
views
Using "send as" feature with gmail from custom domain not hosted by Google fails SPF and DKIM
I have my personal email address set as a "send as" option on gmail. Let's call it [email protected]. I don't use Google for any services relating to mydomain.com, so I don't have an admin ...
4
votes
1
answer
308
views
Do I need to worry about infection from a .PDF from an untrusted sender previewed within GMail?
Context: I received an email claiming an order has been shipped for a service that I am subscribed to but did not believe was due for renewal. I panicked and clicked to preview the attached invoice ...
- 43
11
votes
3
answers
3k
views
When I attach a sensitive pdf encrypted by Adobe with a password, and send it through Gmail with password included, does it make any difference?
Nowadays, many people would attach a sensitive pdf encrypted by Adobe with a password and send it through Gmail with password included (in the same email or different one).
However, I wonder if this ...
- 211
0
votes
0
answers
26
views
Can signing into a compromised account on a new device infect the new device? [duplicate]
Can signing into a gmail account that was compromised/hacked infect a new device? (Account was compromised on one device, and a new device is used to sign in).
What about for other accounts, like ...
1
vote
1
answer
2k
views
Attempt to setup my gmail as recovery mail by random people
I am just curious if anyone experienced the following and have any insight to add to this.
Once in a while, I notice some random person attempting to setup my gmail account as their "recovery&...
- 139
2
votes
1
answer
1k
views
Apple Mail versus GMail app content security
I am trying to determine if there is a benefit to using the GMail app over the built in iOS one when it comes to security. I know that both store data locally on the phone, but the question is whether ...
- 121
1
vote
0
answers
347
views
Gmail app on Android can't send messages since months
I've got the issue that the Gmail app on Android (OnePlus One device) is unable to send messages (it stays in Outbox instead of Sent). Once in the past, I've solved this by clearing the Gmail app ...
- 47
1
vote
2
answers
305
views
SPF result using alias email address
I have received a threatening message in my email [email protected] from my other email address [email protected]. Note that [email protected] is an alias to [email protected].
Also, of course, I ...
- 111
3
votes
0
answers
290
views
Can a bad guy ever get access to my gmail account using ONLY the 2fa app or ONLY the recovery phone (plus username)?
Let's say X is a malicious person.
Let's say I have a gmail account with a recovery phone and with 2fa
enabled. Let's say X knows the username but not the password. X doesn't have any other ...
- 130
1
vote
1
answer
962
views
I am receiving spam from my own email. Is my Gmail account hacked? [duplicate]
I cannot determine if my Gmail account is hacked. I am receiving spam from [email protected] which is identical to my own Gmail address [email protected] except for the dot before the @. How is that ...
0
votes
0
answers
569
views
SPF passes but in Gmail, 'Show Original', top section doesn't show SPF: PASS with IP
When I send an email from my HostGator account to my Gmail account, I see in the header spf=pass...
When I paste the header in this tool -> https://toolbox.googleapps.com/apps/messageheader/
It ...
- 1
0
votes
0
answers
22
views
IP address from headers (Gmail/outlook mobile app) [duplicate]
My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it.
I need to make sure that I'm right ...
- 101
0
votes
2
answers
346
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
0
votes
1
answer
649
views
Is Google mining the content of emails I send to people who use gmail? Could they?
If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
- 9
0
votes
1
answer
266
views
How can I filter out phishing e-mails containing malware using Gmail?
I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this:
6 5 4 8 2586 8016 70170
2 1 08 05 60 172 01 ...
- 203
1
vote
2
answers
3k
views
Abnormal Receiving of Google Verification Codes
Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
- 13
2
votes
1
answer
5k
views
Are there any known vulnerabilities that exploit google's PDF viewer?
I have told my users for years not to ever click on PDF Documents if they are not 100% sure they know where it came from as they can sometimes be the delivery vector for malicious code.
Recently, one ...
- 8,275
4
votes
3
answers
3k
views
Securing Email: use GPG for all emails?
I am thinking of using GPG to sign commits and particularly to secure emails, and have some questions regarding its usefulness.
Basic threat model
The data in transit may not be secure if the ...
- 49
0
votes
0
answers
246
views
Stopping a Subscription Bomb
Are there any methods for stopping a subscription bomb other than issuing a new email address? Creating gmail filters is only getting us so far as there are more emails coming in than we can keep up ...
- 21
-1
votes
1
answer
198
views
Does gmail use SPF or DMARC when sending messages outside of gmail?
I can't seem to find any record of SPF or DMARC in the original messages coming from gmail to my mail server.
Does gmail use SPF or DMARC when sending messages outside of gmail?
1
vote
1
answer
352
views
Is there a way to know when someone tries to guess your gmail password?
Is there a way to check if someone is trying to login to my Gmail account without knowing the password (so they keep trying to guess the password and failing repeatedly or trying to guess the answers ...
user265151
1
vote
0
answers
430
views
Security concerns over ˆf_bisa label showing up on Gmail [closed]
Gmail started showing an unidentified label/folder ˆf_bisa.
Doing a quick check, I see that this has only surfaced within the last couple of days:
https://support.google.com/mail/thread/120772882/...
- 739
2
votes
2
answers
814
views
Do fowarded emails retain DMARC protection?
Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
- 151
-1
votes
2
answers
250
views
Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?
I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
- 151
0
votes
0
answers
4k
views
If I receive Google verification codes that do not work, is my phone compromised? [duplicate]
I know that something similar has happened to other people before (see for instance here or here), but the situation and the question are slightly different.
I wanted to log in to my Gmail account ...
- 101
1
vote
1
answer
515
views
Questionable email from discord [duplicate]
I got a gmail from discord saying a new account had been registered and prompting me to click a verification link. Weirdly, I never made that account, and I already had a discord account under my ...
- 11
0
votes
1
answer
175
views
Do email providers somehow validate/control "Send email as: " feature?
I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is [email protected]. In order to look more professional, I decided to use gmail's &...
- 101
0
votes
1
answer
232
views
Account import into gmail - is it considered safe? [closed]
From my Gmail account / settings, I can import another mailing account (for example a Microsoft Exchange account).
Then Google asks for my personal Microsoft Exchange password (! this is not very &...
- 3
24
votes
3
answers
7k
views
How is it possible for boss to know I am finding a job?
Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right?
I am very very surprised, because :
I work ...
- 351
0
votes
1
answer
112
views
Does the e-mail send from an id to the same id requires encryption and other security checks?
I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same).
Is encryption really required in the above scenario?
Necessity of ...
0
votes
0
answers
317
views
Critical security alert: someone knows your password [duplicate]
Mailed-by: gaia.bounces.google.com Sign.google.com
Security: Standard encryption (TLC). So this is a legitimate email from Google.
Will this email immediately be sent if someone (who isn’t supposed ...
- 1
3
votes
1
answer
2k
views
Does adding a recovery phone number to a Gmail account make it less secure, in the case that I lose both my laptop and phone?
Background
I have a "main" Gmail account, which I set to keep logged in, on my laptop. This "main" Gmail account is important, because it's the email address I used to sign up for ...
- 31
0
votes
0
answers
184
views
I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]
Screenshot:
The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com.
The suspicious link "Unsubscribe_click_here" is:
mailto:cr@burlondesti....
- 101
1
vote
1
answer
6k
views
Can you get virus from previewing email attachments in Gmail?
If an email attachment such as .docx, jpeg, .xls, .pdf, etc. contains virus/malware and if I open it for preview (not opening it in Google Docs or downloading it and opening it) then can I get ...
- 13
1
vote
0
answers
212
views
Understanding Risk-based authentication (Google case) [closed]
I am trying to access my Gmail account. I have the correct password. When I click on login it asks for a confirmation code sent to my recovery email. Hopefully, the recovery email does not have this ...
- 17
3
votes
1
answer
3k
views
Spooky Suspicious Sign-In From My Town
I just had a weird experience that I am trying to figure out. I received a suspicious sign-in notification from google on my gmail account. They had my correct password. This isn't that surprising, ...
10
votes
1
answer
24k
views
How is it possible that this spam mail came from Google Forms without revealing their sender address?
I got just this typical spam email, but this one seemed odd. It came from Google Forms, which apparently can send emails too, however you have to sign in to Google Forms to use it, and it uses the ...
- 339
6
votes
1
answer
68k
views
Received a call from +1 202-455-8888 but I did not attempt to log in to my Gmail
I have enabled multi-factor authentication for my Gmail. When I need to log in to my mail, I should enter an OTP which is sent to my phone number.
I got a call from this number, even though I did not ...
2
votes
1
answer
296
views
How can Google know that a Microsoft e-mail account is "not safe"?
Recently, I was forced to log in to my Gmail account with a browser to keep using it.
Then, Gmail noted that the "alternate e-mail address", my 1999 Hotmail one, which I had long ago ...
- 21
1
vote
1
answer
712
views
Can I consider files compressed with password safe at all?
A follow up to my 7,5 years old question. Back 10-15 years ago, when I wanted to send an executable file over Gmail from my PC, all I had to do was to change file's extension to some meaningless one ...
- 3,689
4
votes
1
answer
2k
views
Does gmail still ignore DKIM if SPF passes, DMARC style?
This blog post from 2016 shockingly implies that gmail will accept an email if either SPF or DKIM passes. We use G suite SMTP servers, therefore SPF provides almost zero protection from spoofing. Is ...
- 43
0
votes
1
answer
3k
views
Can my school look at my search history through Google Chrome if I am logged in through my school account? [duplicate]
I am doing online school at the moment and I am wondering if my school tracks and looks at everything I search just through my school Gmail account. I am on my own network and pc which has never been ...
0
votes
0
answers
260
views
Have I been hacked by a Google employee? [closed]
When using gmail this morning, I got the "Currently being used in other location" warning in the bottom right hand corner:
The details showed 2 different IP addresses accessing my account:
...
- 101
1
vote
1
answer
9k
views
School manages Google accounts, what can they do or see?
My school started using Google Meet for online classes. The accounts we use are managed by them and they told us that they know the IP of the device that we are logging in from. What else can they ...
2
votes
2
answers
675
views
Email sender spoofing check from receiver
I understand there are techniques to prevent someone from spoofing your domain in emails.
Is there any guarantee or check that the receiver can do to ensure the sender is authentic?
Gmail shows TLS ...
0
votes
1
answer
170
views
Spam issue regarding security on gmail app [duplicate]
I have been getting a ton of spam email, so I looked at one of them.
I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do).
...
0
votes
1
answer
463
views
MITM Attack on Gmail's SSL in 2011
I have read these posts: https://www.cnet.com/news/fraudulent-google-certificate-points-to-internet-attack/
https://support.google.com/mail/forum/AAAAK7un8RU3J3r2JqFNTw/?hl=en&gpf=d/category-...
- 127
0
votes
0
answers
205
views
Has this PC been hacked? What's going on?
I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story.
I'm in the UK. The suspect PC runs Win8.1 up to date, ...
- 1,694
1
vote
1
answer
490
views
Can using web-based protocol handlers for protocols such as mailto: links be dangerous in any way?
My question is specifically about an option in Google Chrome under Settings > Site Settings > Handlers. I've read in the past that with desktop-based protocol handlers--such as Office Outlook or ...
- 31
1
vote
2
answers
389
views
Gmail shows my photo after I enter my emaill address (but before my password)
If I have a profile photo associated with a Google account, then when I enter my email address into GMail, but before I enter my password, the photo is shown.
Is there a possible security breach ...
- 1,410