Gwebs Cryptographer

You probably know that Google’s Gmail allows you to access Gmail email from any internet connected-computer, but you may not know that Gmail also allows you to check any of your other email accounts, from any internet computer.

That’s right, Gmail will work as a POP3/IMAP/SMTP mail client, allowing you to check your other email accounts with Gmail!

Translation: you can use Gmail to check your ISP (like Verizon) email account, your business email account, or whatever email accounts you currently use that doesn’t have webmail, or doesn’t have webmail that’s as easy to use as Gmail. You can use Gmail to check your home email accounts when you’re away from home, and you can even use Gmail to check multiple accounts – up to five.

Using Gmail will also allow you to gWebs MailCloak to protect almost any email address out there – just add an address to your Gmail account, and your account will now support MailCloak!

So here’s the quick and dirty on how to get ‘er done!

1) Create a Gmail Account & sign in.

2) Go to your account settings and click “Add an account.”

3) Gmail has account settings for most major ISP’s already in their database, so all you have to do is give them your login information.

4) We suggest using colored labels to identify accounts.

5) Sending mail from a POP account within gmail is easy too! Just click on your email address (or think link that says “change” right next to it) when composing mail, and select the account you wish to send from.

Some of you tech-savvy geeks are saying “Got’er done, kthxbye!” right now, but if your’re still scratching your head, read on after the break for a super-detailed walk through of the whole process!

Read more…

email, fun, google, walkthrough client, email, gmail, gmail tricks, life hack, quick tricks, smtp, tricks, tutorial, Walk Through, webmail

Facebook, if you didn’t know already, asks you for your email address and password when you create an account, or even if you don’t. It’s a highly visible link on their homepage. The stated reason is so that you can send invite letters to your contact list. And you can’t blame the peeps for trying, right? We all gots our hustle. It’s just that Facebook’s particular hustle leaves a lot of room for doubt. It could be Facebook doing exactly what they claim to do and nothing else, or it could be that the largest data mining company in the world is applying to email what Nigerian scammers have been doing with bank accounts for years.

But it’s also a royal pain in the tuches to have to invite every one of your friends to your social networking site manually, and with the importance of social networking sites to many businesses, people in fields that require a little publicity, and people who really like attention, this is a useful feature.

Which is why this article from blogger Dragon’s Flag caught our eye. It’s not just a plug for our product (although an independent testimonial to how awesome we are it certainly is), it’s also a fantastic little piece of know-how that makes you kick yourself for not thinking of it. And so here it is, translated for your edification:

On National Day (October 1st), 2007, I created a Facebook profile, and as part of the registration process, Facebook asked for my email account and password. To test if Facebook poses a threat to social networks by doing this, I gave them my password. I can hand out my password to pretty much anyone who asks for it, but can you?

My email address is dragonflag@gmail.com, and there are over 3000 emails inside. (Facebook supports most of the major services, including gmail, hotmail, live, yahoo, aol, etc.) Before uploading my password, I changed it to 123456.

I’m a longtime user of the notable Gwebs WebmailSafety software. I have more than 50 people in my address list there, and all the email we’ve sent back and forth is stored on Google’s servers is encrypted using a RSA+AES mixed cipher. I’m definitely not worried about Facebook searching or selling my email, because they can’t understand a word of it.

So after I gave my password to Facebook, those 50-odd received their invitation letters, and after 30 minutes I changed it back. Everything was alright, and now Facebook and don’t owe each other anything, nor do we have to be concerned about one another.

I also used the same method to register at the domestic (mainland Chinese) social networking site XING.com, without any apparent danger to my privacy or data. My advice when dealing with commercial web service companies like this is not to trust them lightly. Their promises to you don’t mean a thing, and it’s never a bad idea to have some basic self-protection in place.

So take my advice, especially if you’re one of those people who haven’t invited their email contacts because you’re afraid of your email being searched or revealed.

Italicized text added by translator.

Encrypting his email, we approve of, and using our product to do it, we approve of even more. But another important step he’s taken is:

Before uploading my password, I changed it to 123456…and after 30 minutes I changed it back

This is very important, because people are often predictable when they create passwords, and even if you use “rules” to create less breakable passwords and change them regularly, if someone gets a sample or two of your work, they can figure out your formula, and you’re right back where you started. Change your password to a no-brainer before giving it to someone, and change it back as soon as possible.

The best advice here, though, is not to let a company that makes its living by selling highly specialized user data to advertisers rummage through your inbox. Using Gwebs WebmailSafety; which is free, remember; or any of the other programs on the market means that your email is safe from advertisers as well as hackers.

Security, email, encryption, marketing, passwords, personal, privacy address book, data mining, email, encryption, Facebook, password guessing, privacy, XING.com

One of the reasons we (yes, it’s a we now) at the Cryptographer are in this business is because we get to laugh at the messes we ourselves will never get into. Take, for example, Guo Li, a Hangzhou lawyer whose email was inadvertently “hung out to dry” online by Baidu (China’s search giant) and WanWang (one of China’s largest hosting providers). He sued for 1,000,000RMB (around $120,000), and the results speak for themselves.

I have translated the following article specifically for this blog.

Private Emails “Hung Out to Dry” for a Month, Victim Sues Baidu for
Violation of Privacy.
8-12-2007 3:35 A.M., Beijing Morning Post
After his private emails hosted in a Baidu (百度) account were posted online for more than a month, Hangzhou lawyer Guo Li (郭力) decided to sue Baidu Inc. and email services provider WanWang (万网) for 1,000,000 yuan in damages, claiming his communication privacy rights were violated. A judgment will be issued tomorrow at the Haidian District Court on this so-called “national precedent-setting email privacy case.” Guo Li stated at the conclusion of the trial, “It’s entirely possible to look into other people’s inboxes online, I’ve searched the information myself. This won’t be the last trial of this type.”

Read more…

Security, email, encryption, government, law, personal, privacy Baidu, email, email server, Internet Security, law, lawyer, privacy, search engine, Wanwang, 万网, 晒, 海淀区, 百度, 郭力, 金道律师事务所

I Just came across this article on why you should encrypt all your Google activities. The author notes that Google, like most other sites, doesn’t encrypt your connection data…

Google, like most other similar services, encrypts login traffic but not your content. So the moment you’re signed in they switch to plain-text communications and send everything to you in the open.

This means your mail, the news sources you read, your calendar events — are all able to be read by someone with access to any part of the network between you and Google. This could be your employer at work, the wireless network at your local coffee shop, whatever. This isn’t good.

And his commentors note a few things you can do about it:

1) log in to https://mail.google.com/mail (note the httpS://, the s stands for SSL)

2) Install the “Customize Google” Firefox Add-On to force the use of https for all google services. Also check out “Better gCal,”  and “Better GMail 2”

3) One user suggested  Google Secure Pro.

Security, email, google, privacy email, encryption, google, software

Here is an article on law.com titled Think Before You Send that all my readers should take a look at.

From the article

“Don’t put this in writing, but … ” Those are the opening words of an e-mail that got the writer’s company in legal hot water. And there are plenty more where that came from.”

I mean, you must be kidding me. If you don’t want something in writing, don’t write it. And if you write it, encrypt it! Common sense, kiddies!

Security, email, encryption, government, law, privacy email, encryption

Encryption is extremely important, but its overuse can also lead to problems.

Five to reasons to use Encryption:

1) You are dealing with important government, company, or personal data – especially on laptops, flash drives, or portable hard drives.

The news these days is riddled with stories of public servant or big company data theft, often due to laptop or hard drive loss. If big companies lose their data that often, little companies and individuals must do it all the time (more often, probably, because they don’t have encryption mandates) – they just don’t make the news. If you encrypt your data properly, data theft is virtually impossible. Note too that encryption doesn’t preclude data loss - you should back up your important data as well. Read more…

Security, encryption, privacy communication, data security, email, encryption, files, internet, IT, privacy, protection, Reasons not to use Encryption., Reasons to use Encryption, Security, TrueCrypt, WebmailSafety