4 ms·
Your threat model appears to be that most email providers are hacked a substantial percent of the time, right? What defenses of anything are going to work with
by hyperpape 6y ago
Your threat model appears to be that most email providers are hacked a substantial percent of the time, right? What defenses of anything are going to work with that threat model?
- adrianmonk 6y agoYou don't necessarily have to hack the provider. You can hack the user's laptop and siphon the data out of their email client. If they use a web client, you can read the files it caches. Or maybe you can set up IMAP and have your malware read a copy of everything. To the email provider, all of this just looks like the user is reading their email.
- hyperpape 6y agoFair, though I think it's still true that it's a very difficult threat model. Also worth noting that email clients typically tell you about new logins/clients (though I don't think their way of doing it is particularly robust).