Best email system to avoid hacking.

Best email system to avoid hacking.

Author
Discussion

Skyedriver

Original Poster:

17,812 posts

282 months

Sunday 25th September 2016
quotequote all
Been on Yahoo since 2003, every now and again I "send" random emails out to people in my address book. Of course it's not me, just someone who's hacked my account.
Now with the recent Yahoo scandal I feel I should move on.
So: Outlook?
Can I access that anywhere, inc on my phone?
What other options are there please?

Strangely enough I'm receiving emails purporting to come people who haven't sent them too.

Thanks

GrumpyTwig

3,354 posts

157 months

Sunday 25th September 2016
quotequote all
gmail + two-factor authentication.

HappyMidget

6,788 posts

115 months

Sunday 25th September 2016
quotequote all
Outlook and TFA. Never had my account hacked since the 90's.

SystemParanoia

14,343 posts

198 months

Sunday 25th September 2016
quotequote all
protonmail

AJB88

12,376 posts

171 months

Sunday 25th September 2016
quotequote all
Google ecosystem, I use TFA and also have one of them key tags that plug into USB.

Pixelpeep7r

8,600 posts

142 months

Sunday 25th September 2016
quotequote all
At the end of the day nothing is unhackable, it all depends on the motivation of the hacker(s).

With this in mind if you are emailing Nuclear launch codes or something similarly sensitive you might want to think about encrypting the content itself.

Lastly, if you don't do noob101 and use the same password (and email addy as username) on every other site the damage should be 'relatively' painless when the inevitable happens.

Heartworm

1,923 posts

161 months

Sunday 25th September 2016
quotequote all
It should also be noted its entirely possible to send an email address and make it look like it came from an address it did not, was very easy when I was back at school 15 years ago for people to do this and they didn't beg any access to your account.

Skyedriver

Original Poster:

17,812 posts

282 months

Sunday 25th September 2016
quotequote all
Thanks for all the suggestions
not sure what noob101 is and I only have the nuclear launch code

Yahoo has a second stage log in i thinkand I could try that but Outlook which I guess is the industry standard is possibly a better bet.
One of the problems I guess is that every time you order up something via a web site you end up giving your email address.

And yes, the email I apparently "send" usually have a different suffix to .co.uk but the "senders" must have some access to my address book?

768

13,651 posts

96 months

Sunday 25th September 2016
quotequote all
GMail, if you're after a large supplier. I wouldn't bet my security on a Microsoft product.

bitchstewie

51,095 posts

210 months

Sunday 25th September 2016
quotequote all
Some good replies. Assuming you're simply after something secure but simple to use I'd echo the suggestions of GMail + Two Factor.

Combine it with unique passwords for the different services you use and you're in about as good a place as you can be without going out of your way.

Don

28,377 posts

284 months

Sunday 25th September 2016
quotequote all
If you still have a Yahoo account change its password now.

Then close it and never do business with Yahoo again in any way ever.

How they hacked your account is to do with the disgraceful way Yahoo implemented the "keep me logged in" feature of their webmail and their blogs. A specially crafted blog page allowed hackers to get hold of your password and make free with your email stored on-line.

Whilst I don't put financial details in my email anyone with enough time to trawl through them could have found out rather more than I am happy with about me from them - and this will be true of you as well. They also got to harvest all your friends email addresses that they will now spam with suspiciously nasty messages containing links to compromised sites where they can install malware onto your contacts' machines.

I recommend Google or Outlook. If you have Apple stuff you could consider iCloud.

TonyToniTone

3,425 posts

249 months

Sunday 25th September 2016
quotequote all
768 said:
GMail, if you're after a large supplier. I wouldn't bet my security on a Microsoft product.
Why would you go with gmail if you are a large supplier, they don't have a UK data partition?

What a poor suggestion.

768

13,651 posts

96 months

Sunday 25th September 2016
quotequote all
rolleyes

johnwilliams77

8,308 posts

103 months

Sunday 25th September 2016
quotequote all
768 said:
rolleyes
Interesting explanation

Don

28,377 posts

284 months

Sunday 25th September 2016
quotequote all
There's absolutely nothing wrong with Google's online services, or Microsoft's either. Apple's services are also good.

They ALL had massive security holes in them. They have ALL patched them up. Even Yahoo have patched up their erstwhile shoddy crap so today they should be fine.

I work in Online Banking. The security we apply to that is paranoid beyond description. With that as a focus I wonder how some of the guys at the "internet giants" sleep at night.

Ultimately the absolute best IT security can be circumvented by bad user behaviour. Writing passwords down! Or making them LetMe1n! or Adm1n5trat0r!


DanL

6,200 posts

265 months

Sunday 25th September 2016
quotequote all
Yahoo also offer two factor identification these days. I turned it on the last time "I" sent spam from my account, and it seems to have been fine ever since.

768

13,651 posts

96 months

Sunday 25th September 2016
quotequote all
johnwilliams77 said:
Interesting explanation
I didn't say if he's representing a large supplier, because it's pretty clear he's talking about his personal address.

I said if he's after a large supplier... to provide his email service.

All you have to do is read the posts involved, no more no less, it seems pretty clear to me but there's always someone on here willing to have a go. Having to defend this adds nothing to thread and just detracts from it.

So, yes. rolleyes

Pixelpeep7r

8,600 posts

142 months

Sunday 25th September 2016
quotequote all

The_Doc

4,881 posts

220 months

Sunday 25th September 2016
quotequote all
Pixelpeep7r said:
If that's correct, and I have no reason to doubt it, why are we asked to create passwords in the format 'Password 1' ?

Why not make us create bigelephantprunemirror?

bitchstewie

51,095 posts

210 months

Sunday 25th September 2016
quotequote all
The_Doc said:
If that's correct, and I have no reason to doubt it, why are we asked to create passwords in the format 'Password 1' ?

Why not make us create bigelephantprunemirror?
It's largely to do with conditioning.

Most people will assume that "K1tchen $ink" is a stronger password than "how much is that doggy" even though the latter is simpler to remember.

People are also too used to watching how passwords are cracked in films "They've got 2 characters.. 3.. now it's 4" rather than "you know it all or you don't know it"