	AllExperts > Internet/Network Security
	Search

About Denis Mello
Expertise
I understand the principles and the application of Network managament, from the OSI schema to mechanisms of detection, intrusion, security issues and vulnerabilities, how-to-attack and defend from crackers. I always look to be updated with the latest security holes. I also know OS like Windows 2k, 2k3, Linux, HP-UX and Solaris as best as other platforms.

Experience

Past/Present clients
General Motors, VIVO, Petrobras, OptiGlobe, Brazil Telecom, Hewlett-Packard.

You are here: Experts > Computing/Technology > Internet/Network Security > Internet/Network Security > email security

Internet/Network Security - email security

Expert: Denis Mello - 10/24/2009

Question
QUESTION: Hello Mr. Mello.

(Please note, my question may appear at first to have nothing whatsoever to do with computer security—but it does.)

"In the old days," writers used to send their material to themselves in a sealed envelope, thinking that would establish their copyright. Then the issue was decided in court, that it was a fruitless exercise. Today, writers are wondering the same thing about email.

The problem was, said the courts, that an envelope could be opened, its contents doctored, and then the envelope could be undetectably re-sealed--thus obliterating any value the exercise may have had as proof of origin.

Now, I accept, you (probably) are neither an author or a lawyer, but my question pertains to neither of those fields. What I need to know is:

Say I to sent my book manuscript to myself in an email. Do you as a computer-security expert think it possible, AT ALL, that someone else could take that email and doctor it so as to make it appear otherwise—say, as if they themselves or someone else had written the contents (even one second) earlier?

regards,
Dan

ANSWER: Hi Dan.

I understand your concern. And you have to had it. Yes, it is possible to someone take your email, read it and take the content for copying and finally getting the honours for that. Remember that once you send an email for yourself, it will be kept in your email box remotely. It means that, in case someone crack your email account (by keyloggers, social engineering or even hacking). It is quite difficult to "intercept" your email. What can be done is someone accessing that email, take the enclosed book and rewrite that email as himself.

When you send an email, its contents are open for anybody to read. Email like sending a postcard: everybody who gets it in their hands can read it.

To keep data sent via email private, you need to encrypt it. Only the intended recipient will be able to decipher the message while anybody else sees but gibberish.

I would write a lot trying to explain this for you, and if you do not mind, I will post some useful sites that have

To prevent this, it is recommend to take the following actions:

- Encrypt your email: http://email.about.com/cs/pgp/a/public_key_enc.htm
- More than protect the content when sending, protect it when you store it. Encrypt your book too, this way even your laptop or PC is stolen, the person will not be able to read the content.
- Try not store your document in anyplace. I guess your information/book is one of the most important things you have. So, it is like good. Safeguard it.

http://email.about.com/od/secureemailbyencryption/Secure_Your_Emails_and_Protect...

http://email.about.com/gi/o.htm?zi=1/XJ&zTi=1&sdn=email&cdn=compute&tm=12&f=00&s...

I hope it helps.
Best regards.

Vinny

---------- FOLLOW-UP ----------

QUESTION: Thank you, Vinny, for your in-depth and speedy reply.

Just so I do not misunderstand you, and putting the content itself, of the email, aside, is it possible for someone to alter the DATE and TIME the message was sent, so that (after altering the content and putting their own name on it, they can make it appear as if they wrote it and on an EARLIER date?

regards,
Dan

Answer
Good question.

If I were a thief I would do it differently! I would open your e-mail, turn it fake by writing as "you" (this is simples), taking the attachment or modifying it and then write it in an earlier date. Yes, there are programs that allow people do it.
Again, the person can not intercept your email prior to it arriving to the recipient's mailbox, but without encrypting, the "thief" may (and not for sure will do) open and alter the content.

This is not so simple and it depends on the way you handle your data, your habits, password complexity, locals you access your messages... but it is possible.

Follow my advice, because I'm realizing that you have something that really worth, and encrypt your message.

Summary: a person who has access to your email, can open, read, modify the content and through some specific email client program, modify the current date as earlier (as earlier as he/she can).

Best regards and take care.
Sorry for responding so late. I live in Brazil and as you may know, we're facing a difference on the time zone.

Vinny!

Add to this Answer Ask a Question