[access-uk] Re: Emails security

  • From: Tristram Llewellyn <tristram.llewellyn@xxxxxxxxxxxxxxxxxxx>
  • To: "'access-uk@xxxxxxxxxxxxx'" <access-uk@xxxxxxxxxxxxx>
  • Date: Mon, 29 Nov 2010 11:06:48 +0000

Even if you are using email on a standard email client and even if you have 
some secure authentication (not all providers even have that!) the actual text 
of the email including the headers is sent in the clear.  This means any 
information in the email is potentially susceptible to interception.

If you are using a site that solely works in HTTPS secure mode (like Gmail) at 
a wi-fi hotspot then your conversation with the webmail site cannot be 
intercepted within the hotspot or at least what is intercepted is just pseudo 
random noise generated by the secure connection.  However, again after that the 
email will be sent through the Internet in the clear as plain text.  This is 
fundamentally the reason why putting credit card details and other sensitive 
information is not advised because although most of the time one can hope it is 
not being monitored it could be.

Attachments of one kind or another are a major point at which key loggers can 
be installed but by no means the only ones.  The best way to secure again these 
is not to open them at all, or at least only deal with those you know the 
source of is genuine.  Adobe Reader documents are a major source of exploit so 
treat these with a great deal of caution and update Adobe Reader wherever 
possible.  There are also certain features that can be turned off which enhance 
the security.

One day somebody will invent secure email but until they do you have to 
consider the traffic unsecured and exercise some caution.

Regards.

Tristram Llewellyn
Sight and Sound Technology
Technical Support
www.sightandsound.co.uk

Mail:
Tristram: tristram.llewellyn@xxxxxxxxxxxxxxxxxxx
Technical: Support@xxxxxxxxxxxxxxxxxxx
General - info@xxxxxxxxxxxxxxxxxxx

Phone:
Support line: 0845 634 7979

Sight and Sound Technology Limited is a company registered in England and 
Wales, with company number 1408275.  

Sight and Sound Technology
Welton House North Wing
Summerhouse Road
Moulton Park
Northampton
NN3 6WD 
            
VAT Number - GB 860 2121 66.

-----Original Message-----
From: access-uk@xxxxxxxxxxxxx [mailto:access-uk@xxxxxxxxxxxxx] On Behalf Of 
George Bell
Sent: 29 November 2010 10:50
To: access-uk@xxxxxxxxxxxxx
Subject: [access-uk] Re: Emails security

Hi Derek,

I was watching a TV program only this weekend where they demonstrated
how easily one could be caught with things like "Key loggers".  These
can arrive in what appears to be an innocent e-mail message and send
every keystroke to press to some wallie on a beech in Argentina via a
circuitous internet route which is hard to trace.

Also, for a hacker, intercepting e-mail is often child's play/

The program also surveyed users who were using wireless hotspots here
in the U.K. and found an alarming number of people who had absolutely
no anti-virus protection at all.

George.

-----Original Message-----
From: access-uk@xxxxxxxxxxxxx [mailto:access-uk@xxxxxxxxxxxxx] On
Behalf Of Derek Hornby
Sent: 29 November 2010 10:13
To: access-uk@xxxxxxxxxxxxx
Subject: [access-uk] Emails security

Hi All
I am aware that  it's not a good idea  to put credit card details in
an
email.
But what's the  actual reason.
I mean  surely  the chances  of an email correctly addressed, Going to
the  wrong address,  is less  likely compared to  postal mail
Being delivered to wrong address!


Regards,  Derek 

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: