News for hackers. Stuff that matters.
Re:Clinton ran own computer system for her official emails by imgabe on Wednesday March 04, 2015 @11:39AM (#9145437)
Surely, this must have been common knowledge at the State Dept. Wouldn't they have noticed that her emails came from a domain that wasn't dos.gov? And if she was communicating with other State Department officials, wouldn't the emails they received from her at their dos.gov email be part of the public record anyway, defeating the purpose of running your own server?
Re:Clinton ran own computer system for her official emails by mrebus on Wednesday March 04, 2015 @11:41AM (#9145458)
I just read at tech dirt that she gave staffers email from her domain. So there's that. https://www.techdirt.com/articles/20150303/17404530204/what-...
Re:Clinton ran own computer system for her official emails by lisper on Wednesday March 04, 2015 @11:40AM (#9145447)
Her emails may have looked like they did come from dos.gov. It's trivial to spoof a From header.
Re:Clinton ran own computer system for her official emails by hga on Wednesday March 04, 2015 @11:47AM (#9145505)
Does not appear to be the case, "Guccifer" was the first to bring this to light after he broke into Sidney Blumenthal's AOL account, they came from "[email protected]".
Re:Clinton ran own computer system for her official emails by 3am on Wednesday March 04, 2015 @11:47AM (#9145507)
Hah! Try spoofing an email to a recipient in the State Dept and tell me how it works out :)
Re:Clinton ran own computer system for her official emails by lisper on Wednesday March 04, 2015 @12:26PM (#9145800)
Find me someone in the State Department willing to be the recipient and I will happily conduct this experiment. Why do you think it would be any harder to spoof an email to the State Dept than anywhere else?
Re:Clinton ran own computer system for her official emails by ______1 on Wednesday March 04, 2015 @01:26PM (#9146244)
Re:Clinton ran own computer system for her official emails by rsanders on Wednesday March 04, 2015 @02:43PM (#9146812)
http://mxtoolbox.com/SuperTool.aspx?action=spf%3astate.gov&r....

"No SPF records found"

Looks pretty spoofable.

Re:Clinton ran own computer system for her official emails by lisper on Wednesday March 04, 2015 @02:34PM (#9146730)
SPF only validates the envelope, not the From header. To do that you need DKIM, and I'd be surprised if Dept of State has implemented that.