56
Rogue Cell Tower Shut Down in London (www.cityoflondon.police.uk)
submitted 1 week ago by [email protected] to c/[email protected]
top 6 comments
sorted by: hot top controversial new old
[-] [email protected] 19 points 1 week ago

It still amazes me that the security concept against spoofing a number for phone calls and SMS is "Please don't do that, it's illegal".

[-] ikidd 0 points 1 week ago

Well, then you probably don't want to learn more about email...

[-] [email protected] 5 points 1 week ago* (last edited 1 week ago)

Aren't there more security measures in ensuring email credentials (assuming the user holds up their end)?

[-] [email protected] 5 points 1 week ago

Protocols to authenticate email senders exist, e.g. SPF and DKIM. Mostly an enterprise thing, though.

[-] MetaCubed 5 points 1 week ago* (last edited 1 week ago)

Unless I've seriously lost what "an enterprise thing" is nowadays, I wouldnt call SPF and DKIM (and DMARC for that matter) "mostly an enterprise thing" considering:

  • They are security measures implemented by default with all freemail providers

  • Almost all mail systems will block or flag any mail which isnt at least SPF authenticated

  • Gmail and yahoo now aggressively require DKIM and DMARC to be configured in order for mail to be delivered if delivered in bulk (this is in addition to their past SPF requirements)

  • We (my company) consider it a mandatory now in 2024 to guarantee mail delivery, even for our smallest clients.

[-] BarbecueCowboy 4 points 1 week ago

A lot of smaller businesses just aren't bothering to deal with it right now, relying on getting the opposing IT department to just whitelist their address is apparently working for them with their mail volume. I am talking smaller businesses, but also not mom and pop stores, we're talking national chains, etc. that just don't care about the impact. That is also assuming that whoever manages the receiving mail server has even managed to keep a policy to block items that fail SPF/DKIM in the first place.

Gmail and Yahoo are pushing and I love that, but they're just a bit ahead of the game.

this post was submitted on 11 Jun 2024
56 points (100.0% liked)

Cybersecurity

4871 readers
178 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago
MODERATORS