http://www.nytimes.com/2011/02/17/technology/personaltech/17basics.html?src=me&ref=homepage
Does anyone know whether this also means emails received over mobile phones? Thanks for any replies.
Does anyone know whether this also means emails received over mobile phones? Thanks for any replies.
Translator, Feb 20, 2011 @ 22:40
Yes, emails sent and received via mobile phone can be intercepted unless you use either
1) an encrypted (WPA) Wi-Fi connection, or
2) an encrypted protocol, such as HTTPS (for webmail) or IMAP/SMTP over SSL (for mailclients), or
3) the 3G/HSDPA cellular network instead of the Wi-Fi.
We discussed of this here.
However, note that Firesheep is rather aimed at intercepting passwords. To capture the contents of whole email messages, the hacker has to run a more advanced sniffer program (e.g. Wireshark).
Yes, emails sent and received via mobile phone can be intercepted unless you use either
1) an encrypted (WPA) Wi-Fi connection, or
2) an encrypted protocol, such as HTTPS (for webmail) or IMAP/SMTP over SSL (for mailclients), or
3) the 3G/HSDPA cellular network instead of the Wi-Fi.
We discussed of this here.
However, note that Firesheep is rather aimed at intercepting passwords. To capture the contents of whole email messages, the hacker has to run a more advanced sniffer program (e.g. Wireshark).
TheOmegaMan, Feb 20, 2011 @ 23:32
By the way, email messages are by no means secure. They travel through the Internet in plaintext, and could possibly be read on any router from your computer to the final destination. You should not use them to send any information you wouldn't write on a postcard.
If you really need to send sensitive data, consider using PGP or Enigmail. These tools encrypt your email messages end-to-end, so that they are protected against any sniffing attack, even on an unsecured wireless connection.
By the way, email messages are by no means secure. They travel through the Internet in plaintext, and could possibly be read on any router from your computer to the final destination. You should not use them to send any information you wouldn't write on a postcard.
If you really need to send sensitive data, consider using PGP or Enigmail. These tools encrypt your email messages end-to-end, so that they are protected against any sniffing attack, even on an unsecured wireless connection.
TheOmegaMan, Feb 21, 2011 @ 08:10



