Gmail security hint

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
52,146
Reaction score
8,340
Location
127.0.0.1
If you are like me, and not very impressed with the government wanting ISP's to keep copies of all your emails or if you feel like you want to make your email a little more secure heres some advice.

I have setup a lot of my domains where I have email accounts on offshore servers. This includes DNS, then what I did with all those email accounts, is setup forwarders to my gmail account.

Gmail has this nifty little setting under accounts, where you can change your "reply to" email address. So you can set it not to reply as your gmail email address, but rather as any other one you have access to. IE, your emails will not look like they have come from [email protected], but rather [email protected]. Since I have a lot of email address`s, and a lot domains, I find having this one global inbox very useful.

The problem with the default email login for gmail is that its normal http, and not https, which means when I login, my username and password are sent plain text over the internet, and anything I type when I am composing my email is also sent out plain text. This is not good at all if you are paranoid and need the security!

After a little googling, I came across this https secure gmail login page:

https://gmail.google.com/ - Secure GMAIL https login

At the very least, I would recommend to everyone here rather use that login that the generic one on the front page.

With Gmail setup like this, I am able to securly access my Gmail and all my other mail from anywhere in the world where I have an internet connection.
 
i predict shares in my tinfoil hat business to boom:-)
 
w1z4rd said:
If you are like me, and not very impressed with the government wanting ISP's to keep copies of all your emails or if you feel like you want to make your email a little more secure heres some advice.
I think you are making it even easier for the government by putting all your eggs in one basket
 
And they dont give out search result queires to the FBI? Kinda wierd
 
you have got it wrong. The ISP's don't have to store your email for the government - they have to provide the government with access to your internet connection. Thus the government can see everything you do while online.
 
*So we lose our privacy*

*rolling on the floor....:D

CacklinToad
__________
Deranged and Loving it..:D

:eek: RAMCO - Durban's Own Path to True Enlightenment:eek:
 
charl.voster said:
you have got it wrong. The ISP's don't have to store your email for the government - they have to provide the government with access to your internet connection. Thus the government can see everything you do while online.
Well they could see that you have a nice ssl connection to gmail, but nothing more (hopefully).
 
This is how it works - the ISP's & Cellular co's must be able to provide the Government with the ability to monitor and intercept. But this doesnt mean that there are a bunch of guys sitting around recording what you are surfing, they only monitor you when they suspect that you are involved in illegal activities. And it is aimed at syndicates, not individuals. To get access to the data, they need a Judge to give permission.

So basically, for example, the Scorpions will suspect that you are producing Child Porn movies, they will investigate and, when they have suitable case against you, will lodge a request with a Judge (high court). Once accepted, they will then monitor you which will provide the necessary evidence.

I personally would worry about this whole thing, unless you are doing some really heavy stuff.
 
I was pretty sure that the ISP`s had to keep a copy off all emails... might wanna double check this.

I personally would worry about this whole thing, unless you are doing some really heavy stuff.

I take it you are not a student of politics? How much do you think a bribe will be for someone to get access to that information? Not much if I can get an ID for a couple of hundred bucks.
 
*I personally would worry about this whole thing, unless you are doing some really heavy stuff.*
(would'nt??) but way too late... u certainly dont have to be doing heavy stuff of ANY sort.
with the right connections any would- be spook is in and thats the bottom line.

ToadTheDeranged
_______________

:eek: RAMCO - Durban's Own Path to True Enlightenment:eek:
 
btw got a mail addressed from myself even though i didn't send it. Anyone know if this is just a sender rename or something more sinister? from what i can tell its just a forward with sender named differently and definately not sent from gmail..

Code:
X-Gmail-Received: c2fc7c7f1549eeab1e8d76cd88aaaf75bcbbbe0e
Delivered-To: [email protected]
Received: by 10.49.1.11 with SMTP id d11cs7111nfi;
        Mon, 5 Jun 2006 18:03:00 -0700 (PDT)
Received: by 10.36.251.51 with SMTP id y51mr2947039nzh;
        Mon, 05 Jun 2006 18:02:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from wks-flt-55dbc1s.net (202-151-71-102.dsl.teleguam.net [202.151.71.102])
        by mx.gmail.com with SMTP id 38si8240797nzk.2006.06.05.18.02.59;
        Mon, 05 Jun 2006 18:02:59 -0700 (PDT)
Received-SPF: neutral (gmail.com: 202.151.71.102 is neither permitted nor denied by domain of [email protected])
Date: Tue, 06 Jun 2006 10:59:24 +1000
To: "Krycor" <[email protected]>
From: "Krycor" <[email protected]>
Subject: 557
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html><body>
969

<br>
</body></html>

weird thing is i usually send mail with my domain aliases.. how i get spam with gmail addy is odd.
 
krycor said:
btw got a mail addressed from myself even though i didn't send it. Anyone know if this is just a sender rename or something more sinister? from what i can tell its just a forward with sender named differently and definately not sent from gmail..

Code:
X-Gmail-Received: c2fc7c7f1549eeab1e8d76cd88aaaf75bcbbbe0e
Delivered-To: [email protected]
Received: by 10.49.1.11 with SMTP id d11cs7111nfi;
        Mon, 5 Jun 2006 18:03:00 -0700 (PDT)
Received: by 10.36.251.51 with SMTP id y51mr2947039nzh;
        Mon, 05 Jun 2006 18:02:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from wks-flt-55dbc1s.net (202-151-71-102.dsl.teleguam.net [202.151.71.102])
        by mx.gmail.com with SMTP id 38si8240797nzk.2006.06.05.18.02.59;
        Mon, 05 Jun 2006 18:02:59 -0700 (PDT)
Received-SPF: neutral (gmail.com: 202.151.71.102 is neither permitted nor denied by domain of [email protected])
Date: Tue, 06 Jun 2006 10:59:24 +1000
To: "Krycor" <[email protected]>
From: "Krycor" <[email protected]>
Subject: 557
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html><body>
969

<br>
</body></html>

weird thing is i usually send mail with my domain aliases.. how i get spam with gmail addy is odd.

AFAIK it is a setting. When I send emails from school through web based gmail, then I gome and recieve my mail through smtp I get a copy of the email I sent
 
Top
Sign up to the MyBroadband newsletter
X