Windows 10: Ropemaker - new Exploit for Desktop Email Clients

Mimecast (Email security vendor) has publish a warning today about possible email exploit called Ropemaker.

A new type of email exploit could affect all kind of computer users, even the most advanced. Practically all desktop email clients are vulnerable to this exploit if sending message in html format.

Read more at www.eweek.com | security/ropemaker-email-exploit-exposes-desktop-clients-to-security-risks

:)

 

emails disappear from phone

I use IMAP, so this is a guess, but what I think is happening is your desktop email client is going to get the POP3 email. When it does that, it downloads it and removes the email from the server.

When your WP7 email client checks, it sees the message is gone and removes it from the phone. This is how Windows Mobile has worked since 2000.

The only solution is to either not check email on your desktop or if your desktop client allows, configure it to "leave messages on POP3 server." Most clients allow that.

Ed Hansberry - www.ehansberry.com

 

After Update, E66 Keeps Wanting to Install new Email Client

Using the Nokia Windows Desktop application, I updated my E66 to the latest firmware. Things were fine. After a couple weeks, I decided to update my email inboxes. Deleted an old one, and then went to add another.



The phone wants to install a new client. I didn't want to install the new client. The old one was fine. Still, I did install it just to see what it was. It worked okay, but I didn't like how small the fonts were.



I used Installed Apps and removed the new email client. The new email app was now gone. The old default messaging application is still present. When I went to add an account, it again wanted to add the new email client. I canceled, but that's all that happens.
It turns out it won't let me add a 2nd mail account without installing the new email client.



So, I either want to add an account to the default messaging app (which I was able to do before, I had 3), or delete the default app and use just the new email client. I don't want two clients.



Suggestions?

 

I'm not sure, if everybody understands how easy this vulnerability is to exploit (since there is no discussion here), I'm posting link to another coverage of it: BleepingComputer | ropemaker-lets-attackers-change-your-emails-after-delivery