PanoTools NG:
RE: Breached Websites among PTNG subscribers according to Avira
Roger Williams 2014-Apr-16 11:47:08
Yes, thank you, Quentin.
That was generally my understanding of the situation and I wasn?t too worried about that couple of spoof mails. My ISP?s mail server will now NOT relay mails, so I am pretty well protected.
Roger
From: #removed# [mailto:#removed#] On Behalf Of quentin desouza
Sent: Wednesday, April 16, 2014 10:40 AM
To: #removed#
Subject: Re: [PanoToolsNG] Breached Websites among PTNG subscribers according to Avira
Hello Roger,
I am very surprised to hear this.
The point that you bake about someone sending mail from your email address can be done without knowing the other persons password.
It is very easy to spoof a email address because there is no method to check outgoing mail.
Spoofing can be done by simply creating a mail account with the mail address you want to spoof.
Probably it can't be done on a Apple computer or using thunderbird as they check the credentials before allowing you to send mail.
But it can be done using any very basic mail client.
I myself have received many spam mails from myself but I know for a fact that my mail account has not been hacked.
Regards,
Quentin.
On Wednesday, April 16, 2014, Roger Williams <#removed#> wrote:
I recently installed the Avira app for iOS on my iPhone 5 and it reported that 29 of my email contacts had had their addresses and passwords breached, i.e., that they had been published on the web. An alternative mail address of my own was included among them, and so were many of those in PanoToolsNG who have written directly to me (and therefore appear in my address book). The only site that I use among those listed by Avira as breached for my mail account was Adobe, and of course I was already aware of this breach. Fortunately, although Adobe?s mail addresses were breached, the passwords were still encrypted, so the possibility of identity theft was low, but I changed my password anyway. If anyone is interested to know if Avira considers them or their correspondents ?breached? I recommend installing this free app and letting it scan your address book.
I did receive a couple of spam mails that pretended to be from my other mail address but none after that. Hope no-one else has received any? My ISP is now set to reject emails that do not originate from my own computer(s) so it shouldn?t be happening.
Roger W.