3 ms·
Forgive my ignorance here - but how did the fake email manage to have been signed by facebook.com? If anyone knows, I'd love a detailed explanation or a referen
by Shenglong 15y ago
Forgive my ignorance here - but how did the fake email manage to have been signed by facebook.com? If anyone knows, I'd love a detailed explanation or a reference link. Thanks!
- noonat 15y agoThe article says that the scammer sent a _screenshot_ of the email (so the email was just photoshopped, and not actually signed by facebook.com).
- Shenglong 15y agoMy fault - thanks for the clarification.
- sankara 15y agoActually you don't even need photoshop. Firebug would do.
- RyanKearney 15y agoSo will Chrome's built in developer tools. No bloated browser or third party tools required.
- edwardy20 15y agoIt's actually quite easy to fake an email address because SMTP doesn't authenticate the sender. For example, I can send someone (exampleperson@example.com) an email that appears to be from 'admin@facebook.com' with one line of php code: <?php mail('exampleperson@example.com', 'Example Subject', 'Example Message', 'From: admin@facebook.com' ); ?>
- markelliot 15y agoThat explains spoofing of the originating address; to generate a signed email surely you would need a set of certificates.
- edwardy20 15y agoOops I missed that. noonat's solution seems more likely then.
- calloc 15y agoIf you have access to their new facebook mail stuff, is it sent from an @facebook.com email address?
- ceejayoz 15y agoYes, which is another bit of evidence that this is a fake - Facebook employees use @fb.com as their e-mails.