full-disclosure - Re: Gmail emails issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 4 Aug 2006 11:45:01 -0500
From: "John Dietz" <www.whitewolf@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Gmail emails issue

As I see it, the real issue is just how secure do you think email really
is?  If someone really wants to read that FW you sent to your mom, there are
plenty ways for them to do this, especially if they have physical access to
the computer you used.  Computer Forensics can be quite interesting and with
the right tools and know-how, it's really not that difficult to look at
websites you've been to (even if you cleared your history), including
web-mail pages.
As far as Gmail retaining a copy on the server or not, it makes perfect
since for them to store copies to allow for retransmission of the message in
the case of an error, not to mention how your "Sent Mail" folder does in
fact reside on their servers.
Bottom line:
Email is NOT a secure communications medium and should not be relied on as
if it were.  If the information you are sending/receiving is of a
particularly sensitive nature, I would suggest you find some other medium,
such as SSL with encryption.

-John

-- 
There is intelligence is in having all the answers, but wisdom lies in
knowing which of the questions to answer.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/