Email Spoofing

Commenters debate the ease of spoofing email sender addresses and how this likely explains seemingly authentic but suspicious emails in a reported story, recommending header checks and noting persistent email authentication flaws.

➡️ Stable 0.5x Security
4,253
Comments
20
Years Active
5
Top Authors
#2970
Topic ID

Activity Over Time

2007
4
2008
34
2009
58
2010
160
2011
127
2012
187
2013
292
2014
233
2015
147
2016
264
2017
240
2018
240
2019
257
2020
307
2021
370
2022
363
2023
343
2024
266
2025
327
2026
34

Keywords

SPF ProtonMail CNN FIFA UI DNS FB GP cscglobal.com IP email sender address mails headers mail email address email addresses emails cnn

Sample Comments

mikkom • Oct 1, 2015 • View on HN

It's extemely simple to fake the sender of email. That's what probably happened.

trumped • May 24, 2018 • View on HN

How did they receive the conversation? email? was the receiving address similar to some other address (the real recipient)?

epylar • May 20, 2013 • View on HN

I see email spoofing being a problem with this.

aaron_m04 • Feb 9, 2019 • View on HN

Just a guess: the author could not be sure that the email address legitimately belongs to the scammer. It could be a hacked account.

Too • Dec 25, 2020 • View on HN

Can't believe email clients still allow such basic tricks to not be spotted instantly.

philwelch • Nov 12, 2010 • View on HN

Email addresses can be spoofed.

killingtime74 • Jun 25, 2024 • View on HN

It's not snooping btw, this is information the sender provided. Would be hard to deliver the mail otherwise....

devops000 • Sep 5, 2021 • View on HN

How they could have such emails?

judk • Mar 21, 2015 • View on HN

Gmail controls this permission per sender. Nobody savvy enough to read Wired would use a mail system that was broken in the described way.

TheBozzCL • Feb 5, 2025 • View on HN

Are you sure they’re not just spoofing the address? Check the email headers.