maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Is Nokia Messaging secure? (gmail account hacked) (https://talk.maemo.org/showthread.php?t=58574)

meep 2010-07-16 10:39

Is Nokia Messaging secure? (gmail account hacked)
 
I ask because my gmail account has been busy spamming everyone in my address book

Here's who's been doing it:

Received: by 10.204.34.9 with SMTP id j9mr716387bkd.179.1279273798203; Fri, 16
Jul 2010 02:49:58 -0700 (PDT)
Received: by 10.204.99.70 with HTTP; Fri, 16 Jul 2010 02:49:47 -0700 (PDT)
Date: Fri, 16 Jul 2010 10:49:47 +0100


Here's who's been connected to my gmail account:

Mobile Brazil (189.101.155.208) 10:49 (48 minutes ago)
Mobile Hungary (78.92.32.39) 10:49 (48 minutes ago)
Mobile Argentina (186.19.105.127) 10:49 (48 minutes ago)
IMAP 213.185.186.218 10:49 (48 minutes ago)
Mobile Poland (79.188.95.206) 10:47 (49 minutes ago)
IMAP 213.185.186.247 10:36 (1 hour ago)
IMAP 213.185.186.244 10:21 (1 hour ago)
IMAP 213.185.186.216 10:06 (1.5 hours ago)
IMAP 213.185.186.217 09:51 (1.5 hours ago)

I occassionally use my laptop for gmail (which I am scanning for spyware now), it occurred to me that I've just started using nokia messaging, I just wanted to rule out that it's unsecure :)

Plus... mainly vent my rage!!! BASTARDS!!

Thanks

petur 2010-07-16 10:51

Re: Is Nokia Messaging secure? (gmail account hacked)
 
I use IMAP to access gmail, works pretty good... the connection is encrypted I think

James_Littler 2010-07-16 10:51

Re: Is Nokia Messaging secure? (gmail account hacked)
 
I'm not sure about Nokia Messaging security, I know it's not as secure as the blackberry push email service.

Personally I use hotmail as my provider, gmail is also in the list, so my advice would be to set your email up using gmail as a provider and then search for a thread on here called 'modest fixes' and apply the fix in that thread to fix the modest email service (the one used with gmail, hotmail, etc), as in pr1.2 email updates are a little...slow..to say the least.

optimistprime 2010-07-16 11:07

Re: Is Nokia Messaging secure? (gmail account hacked)
 
there was a thread about a month ago about peoples gmail account being hand....alot of people post about their accounts being hacked and using their n900 for messaging. I was one of those people who got hacked.....something is definitely up. check the other thread for more info.

jaysire 2010-07-16 11:20

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by optimistprime (Post 753774)
there was a thread about a month ago about peoples gmail account being hand....alot of people post about their accounts being hacked and using their n900 for messaging. I was one of those people who got hacked.....something is definitely up. check the other thread for more info.

I didn't find that other thread and my gmail was hacked maybe a month ago. Maybe you could link to the other thread?

optimistprime 2010-07-16 11:54

Re: Is Nokia Messaging secure? (gmail account hacked)
 
here ya go....


http://talk.maemo.org/showthread.php?t=56656

kureyon 2010-07-16 12:29

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by meep (Post 753750)
Here's who's been connected to my gmail account:

Mobile Brazil (189.101.155.208) 10:49 (48 minutes ago)
Mobile Hungary (78.92.32.39) 10:49 (48 minutes ago)
Mobile Argentina (186.19.105.127) 10:49 (48 minutes ago)
...

Where exactly did you get the above connection info from? Does gmail allow you to see a log of who/where your account is being accessed from?

Tomaszd 2010-07-16 12:32

Re: Is Nokia Messaging secure? (gmail account hacked)
 
I'm really not sure about the security. I have one question though, have you been using an unencrypted WLAN connection, especially free public hotspots?

optimistprime 2010-07-16 12:40

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by kureyon (Post 753840)
Where exactly did you get the above connection info from? Does gmail allow you to see a log of who/where your account is being accessed from?


if you look at your gmail page, there should be some info at the bottom by details, that shows if your gmail account is logged in at another location and when the last time and location it was logged in. you can click details to see all recent activity

tushyd 2010-07-16 12:53

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Yesterday morning my Nokia Messaging account started asking for my NM password, oddly enough. I entered it and it appeared to have taken, but then it wouldn't pull any new emails and 20 mins later it asks the password again.

I called Nokia and the rep couldn't figure out either. We tried resetting my NM password and that didn't work. So they "escalated" it and I'm going to get a call within 48 hours... not sure what they're going to ask me to do. Maybe delete my NM account entirely and start over again?

kureyon 2010-07-16 13:17

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by optimistprime (Post 753846)
there should be some info at the bottom by details, that shows if your gmail account is logged in at another location and when the last time and location it was logged in.

Ah ok thanks. I always use IMAP so never noticed this new(?) feature :)

kureyon 2010-07-16 13:24

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by tushyd (Post 753856)
Maybe delete my NM account entirely and start over again?

These mail consolidation services is just another vector for your email passwords to get stolen - whether maliciously or unintentionally.

arbitrabbit 2010-07-16 14:06

Re: Is Nokia Messaging secure? (gmail account hacked)
 
It should be reasonably secure. It does use SSL to connect to Gmail, and the connection between your phone and Nokia Messaging is encrypted as well

Laughing Man 2010-07-16 15:48

Re: Is Nokia Messaging secure? (gmail account hacked)
 
It is secure, but kureyon is right about number of possible attack vectors.

Now instead of someone targeting
- your device
- the connection between your device and the tower
- your service provider
- the connection between the tower and the Google server
- Google

They can target
- your device
- the connection between your device and the tower
- your service provider
- the connection between the tower and the Nokia server
- Nokia
- the connection between Nokia's server to Google's server
- Google

Granted the likelihood is unlikely.

longcat 2010-07-16 16:22

Re: Is Nokia Messaging secure? (gmail account hacked)
 
this is okay :

http://talk.maemo.org/showpost.php?p=722457&postcount=3

arbitrabbit 2010-07-16 17:07

Re: Is Nokia Messaging secure? (gmail account hacked)
 
Quote:

Originally Posted by Laughing Man (Post 754003)
It is secure, but kureyon is right about number of possible attack vectors.

Now instead of someone targeting
- your device
- the connection between your device and the tower
- your service provider
- the connection between the tower and the Google server
- Google

Man in the middle attack on SSL in real time is extremely hard to pull off.. that's the whole point of using SSL that all that anyone who hacks the connection between the tower and your phone, your service provider and the tower and google server would see is an encrypted stream of data, as the encryption is happening between Google and your phone in the application layer. So while it might increase the attack vectors, it is unlikely to make any change in the security of your overall connection. It is much more likely that someone hacks your computer, installs a keylogger and steals your password.

Laughing Man 2010-07-16 17:15

Re: Is Nokia Messaging secure? (gmail account hacked)
 
My point was more that the number of possible attack vectors do increase. Though from a security standpoint your right, it's not much to worry about due to things like SSL.

It's also extremely unlikely that someone does social engineering on Nokia or Google to get your password. I think they'd have much higher targets if someone could pull something like that off.


All times are GMT. The time now is 02:55.

vBulletin® Version 3.8.8