Just got an email from Google informing me that "my" Google account(otienojoelochieng@gmail:not my account & unknown to me) had logged in from Firefox! Got a bit curious as most of you would, strange enough the recovery details were my actual email and phone number! Any one else experiencing this?
This seems to be a new security measure. If you login using a browser than the one you have always used, it sends you that email. I have received such email after login to Firefox and IE ______________________ Mwendwa Kivuva, Nairobi, Kenya "There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson On 11 June 2015 at 21:56, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
Just got an email from Google informing me that "my" Google account(otienojoelochieng@gmail:not my account & unknown to me) had logged in from Firefox! Got a bit curious as most of you would, strange enough the recovery details were my actual email and phone number!
Any one else experiencing this?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
This happens to me all the time - One thing I researched and found out, google does not recognize the dot (.) on email addresses yet it actually accepts it when you register, which is pure bullshit. My email is okechukwu@gmail.com but I receive mails for oke.chukwu@gmail.com and the likes, so if someone has that as their recovery address, I receive it (lots of lots of mails I nowadays just ignore) and apply for my address to be removed from that recovery address. I just wonder how many of my mails are also received by others, thats why I no longer use gmail for any serious/sensitive emails, unless password protected like bank statements ./Ok3ch On Fri, Jun 12, 2015 at 12:31 PM, Mwendwa Kivuva via skunkworks < skunkworks@lists.my.co.ke> wrote:
This seems to be a new security measure. If you login using a browser than the one you have always used, it sends you that email.
I have received such email after login to Firefox and IE
______________________ Mwendwa Kivuva, Nairobi, Kenya
"There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson
On 11 June 2015 at 21:56, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
Just got an email from Google informing me that "my" Google account(otienojoelochieng@gmail:not my account & unknown to me) had logged in from Firefox! Got a bit curious as most of you would, strange enough the recovery details were my actual email and phone number!
Any one else experiencing this?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Wow... hadn't realised that. I guess the dot just makes more sense for humans than the google servers. On Sat, Jun 13, 2015 at 11:09 AM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
This happens to me all the time - One thing I researched and found out, google does not recognize the dot (.) on email addresses yet it actually accepts it when you register, which is pure bullshit. My email is okechukwu@gmail.com but I receive mails for oke.chukwu@gmail.com and the likes, so if someone has that as their recovery address, I receive it (lots of lots of mails I nowadays just ignore) and apply for my address to be removed from that recovery address.
I just wonder how many of my mails are also received by others, thats why I no longer use gmail for any serious/sensitive emails, unless password protected like bank statements
./Ok3ch
On Fri, Jun 12, 2015 at 12:31 PM, Mwendwa Kivuva via skunkworks < skunkworks@lists.my.co.ke> wrote:
This seems to be a new security measure. If you login using a browser than the one you have always used, it sends you that email.
I have received such email after login to Firefox and IE
______________________ Mwendwa Kivuva, Nairobi, Kenya
"There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson
On 11 June 2015 at 21:56, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
Just got an email from Google informing me that "my" Google account(otienojoelochieng@gmail:not my account & unknown to me) had logged in from Firefox! Got a bit curious as most of you would, strange enough the recovery details were my actual email and phone number!
Any one else experiencing this?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best Regards Jimmy Thuo
c.h.r.i.s@gmail.com as chri.is@gmail.com is the same email chris+hello@gmail.com, chris+nairobi@gmail.com, chris+newmail@gmail.com c.hri.s+<anything>@gmail.com also goes to the same email. c.h.r.i.s@googlemail.com is also the same address and so is chris+me@googlemail.com so for those time limited email-is-primary-key services.... ᐧ On 13 June 2015 at 09:09, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
This happens to me all the time - One thing I researched and found out, google does not recognize the dot (.) on email addresses yet it actually accepts it when you register, which is pure bullshit. My email is okechukwu@gmail.com but I receive mails for oke.chukwu@gmail.com and the likes, so if someone has that as their recovery address, I receive it (lots of lots of mails I nowadays just ignore) and apply for my address to be removed from that recovery address.
I just wonder how many of my mails are also received by others, thats why I no longer use gmail for any serious/sensitive emails, unless password protected like bank statements
./Ok3ch
On Fri, Jun 12, 2015 at 12:31 PM, Mwendwa Kivuva via skunkworks < skunkworks@lists.my.co.ke> wrote:
This seems to be a new security measure. If you login using a browser than the one you have always used, it sends you that email.
I have received such email after login to Firefox and IE
______________________ Mwendwa Kivuva, Nairobi, Kenya
"There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson
On 11 June 2015 at 21:56, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
Just got an email from Google informing me that "my" Google account(otienojoelochieng@gmail:not my account & unknown to me) had logged in from Firefox! Got a bit curious as most of you would, strange enough the recovery details were my actual email and phone number!
Any one else experiencing this?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
After a serious review, i realized that the owner of the gmail account ( otienojoelochieng@gmail.com) is known to me. He once tried to con me by claiming to have wired cash to my bank account via internet banking,he forwarded me an email from Family bank to confirm this con. I bursted him n he spent some days in the cells. I guess he must have tried to hack my gmail and probably with lack of knowledge put my email address and my phone number as his recovery details. So when he logged on from a new location, the notification was forwarded to me.
Strange. For me I get the unrecognized login attempt as well receive emails when someone sends email to solomburu@gmail.com yet my email address is solo.mburu@gmail.com On 13 June 2015 at 16:46, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
After a serious review, i realized that the owner of the gmail account ( otienojoelochieng@gmail.com) is known to me. He once tried to con me by claiming to have wired cash to my bank account via internet banking,he forwarded me an email from Family bank to confirm this con. I bursted him n he spent some days in the cells. I guess he must have tried to hack my gmail and probably with lack of knowledge put my email address and my phone number as his recovery details. So when he logged on from a new location, the notification was forwarded to me.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
What's even stranger is that google/gmail will not allow new email address to be created if there is any variation (with or without the characters) of the address already existing. [image: Inline image 1] On Sat, Jun 13, 2015 at 11:06 PM, Solomon Mbũrũ Kamau < skunkworks@lists.my.co.ke> wrote:
Strange.
For me I get the unrecognized login attempt as well receive emails when someone sends email to solomburu@gmail.com yet my email address is solo.mburu@gmail.com
On 13 June 2015 at 16:46, Jared Koyier via skunkworks < skunkworks@lists.my.co.ke> wrote:
After a serious review, i realized that the owner of the gmail account ( otienojoelochieng@gmail.com) is known to me. He once tried to con me by claiming to have wired cash to my bank account via internet banking,he forwarded me an email from Family bank to confirm this con. I bursted him n he spent some days in the cells. I guess he must have tried to hack my gmail and probably with lack of knowledge put my email address and my phone number as his recovery details. So when he logged on from a new location, the notification was forwarded to me.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Skunks, My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part. Regards, Peter Mugoh Sent from my BlackBerry® -----Original Message----- From: Bwana Lawi via skunkworks <skunkworks@lists.my.co.ke> Date: Sun, 14 Jun 2015 08:08:54 To: Solomon Mbũrũ Kamau<solo.mburu@gmail.com>; Skunkworks Mailing List<skunkworks@lists.my.co.ke> Reply-To: Bwana Lawi <mail2lawi@gmail.com>, Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Gmail Security Gone Bonkers? _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames. This can be easily proven by attempting to login to the "wrong" email address with your valid password. On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
You have not explained why you don't consider this a flaw. You cannot claim this is a feature since the dot is a recognized character. Bringing in the password on a username discussion is going out of topic. ./Ok3ch Sent from my iPad
On Jun 14, 2015, at 10:48, Mark Kipyegon via skunkworks <skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On 14/06/2015 13:05, Okechukwu wrote:
You have not explained why you don't consider this a flaw. You cannot claim this is a feature since the dot is a recognized character. Bringing in the password on a username discussion is going out of topic.
This behaviour was intentionally added by Google and that qualifies it as a feature. A quick online search returns the link below explaining the "flaw". http://gmailblog.blogspot.com/2008/03/2-hidden-ways-to-get-more-from-your.ht...
This flaw was first highlighted in the Internet a long time back and at first Google denied it and then later acknowledged it. Doesn't look like something that was initially intentional - just google it and you will read the history ./Ok3ch Sent from my iPad
On Jun 14, 2015, at 11:22, Mark Kipyegon <mkipyegon@outlook.com> wrote:
On 14/06/2015 13:05, Okechukwu wrote: You have not explained why you don't consider this a flaw. You cannot claim this is a feature since the dot is a recognized character. Bringing in the password on a username discussion is going out of topic.
This behaviour was intentionally added by Google and that qualifies it as a feature.
A quick online search returns the link below explaining the "flaw".
http://gmailblog.blogspot.com/2008/03/2-hidden-ways-to-get-more-from-your.ht...
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different. Kind Regards, Kennedy KK Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On 14 Jun 2015, at 14:10, "Kennedy Kairu Kariuki" <kkairu@gmail.com> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Documentation from Google themselves says otherwise. If you have evidence to the contrary then I would encourage you to share it with the group.
I have emails with dots or what am I missing. Sending to k.kairu will deliver to kkairu? Kind Regards, Kennedy KK Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu On Sun, Jun 14, 2015 at 2:41 PM, Mark Kipyegon <mkipyegon@outlook.com> wrote:
On 14 Jun 2015, at 14:10, "Kennedy Kairu Kariuki" <kkairu@gmail.com> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Documentation from Google themselves says otherwise.
If you have evidence to the contrary then I would encourage you to share it with the group.
Test On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hmmmm...came to my email Kind Regards, Kennedy KK Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn. ./Ok3ch On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
What can we do about it? It's Google's free email service. Regards, Job Muriuki, Skype: heviejob On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Well, a lot has been talked about it on the same and if they want to break RFC on their service, they can - but by talking about it, you became aware and know that your important mails could be reaching other non intended recipients, and its upon you to decide what to do about that. ./Ok3ch On Sun, Jun 14, 2015 at 5:12 PM, Job Muriuki <muriukin@gmail.com> wrote:
What can we do about it? It's Google's free email service.
Regards, Job Muriuki,
Skype: heviejob
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: > Skunks, > > My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part. >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice. On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards Brian Ngure
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw. Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks <skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks <skunkworks@lists.my.co.ke> wrote: Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote: Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote: Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote: Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks <skunkworks@lists.my.co.ke> wrote: Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: > Skunks, > > My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part. >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
No, you can't. Try it yourself. I also don't see any security flaw. On Sun, Jun 14, 2015 at 8:32 PM, Areba Collins <arebacollins@gmail.com> wrote:
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw.
Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks < skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
Gentlemen I believe you will find this is a feature and not a security issue. Reason being that dots are not recognised as characters in Gmail usernames.
This can be easily proven by attempting to login to the "wrong" email address with your valid password.
On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: > Skunks, > > My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part. >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards Brian Ngure
Maybe it isn't because you have just discovered about it now yet it has been a problem for over 5 years or so. Google did clean up its act by now not allowing you to create these aliases, but like I said, oke.chukwu@gmail and okechukwu@gmail both do exists and they never created themselves, did they? ./Ok3ch On Sun, Jun 14, 2015 at 6:43 PM, Brian Ngure <brian@pixie.co.ke> wrote:
No, you can't. Try it yourself. I also don't see any security flaw.
On Sun, Jun 14, 2015 at 8:32 PM, Areba Collins <arebacollins@gmail.com> wrote:
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw.
Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks < skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote:
Mr Mark, dots are recognized as unique usernames kkairu and k.kairu are different.
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < skunkworks@lists.my.co.ke> wrote:
> Gentlemen I believe you will find this is a feature and not a > security > issue. Reason being that dots are not recognised as characters in > Gmail > usernames. > > This can be easily proven by attempting to login to the "wrong" email > address with your valid password. > > On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: > > Skunks, > > > > My mail address is pkmugoh@gmail.com and I have sent an email to > pk.mugoh@gmail.com and received it as well as replied to it. I > think this is a bad security flaw on googles part. > > > > > _______________________________________________ > skunkworks mailing list > skunkworks@lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
My first google account registered in 2006 had a dot between my names then later after forgetting the password I registered without the dot and it accepted. These days I still get emails from both. I consider it as a feature but originally it wasn't. On Sun, 14 Jun 2015 at 21:55 Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Maybe it isn't because you have just discovered about it now yet it has been a problem for over 5 years or so. Google did clean up its act by now not allowing you to create these aliases, but like I said, oke.chukwu@gmail and okechukwu@gmail both do exists and they never created themselves, did they?
./Ok3ch
On Sun, Jun 14, 2015 at 6:43 PM, Brian Ngure <brian@pixie.co.ke> wrote:
No, you can't. Try it yourself. I also don't see any security flaw.
On Sun, Jun 14, 2015 at 8:32 PM, Areba Collins <arebacollins@gmail.com> wrote:
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw.
Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks < skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
Test
On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote:
> Mr Mark, dots are recognized as unique usernames kkairu and k.kairu > are different. > > > Kind Regards, > > Kennedy KK > > Mobile: +254721699119 > Skype: k.kairu > Gtalk: kkairu > > > On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < > skunkworks@lists.my.co.ke> wrote: > >> Gentlemen I believe you will find this is a feature and not a >> security >> issue. Reason being that dots are not recognised as characters in >> Gmail >> usernames. >> >> This can be easily proven by attempting to login to the "wrong" >> email >> address with your valid password. >> >> On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: >> > Skunks, >> > >> > My mail address is pkmugoh@gmail.com and I have sent an email to >> pk.mugoh@gmail.com and received it as well as replied to it. I >> think this is a bad security flaw on googles part. >> > >> >> >> _______________________________________________ >> skunkworks mailing list >> skunkworks@lists.my.co.ke >> ------------ >> List info, subscribe/unsubscribe >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke >> > > > _______________________________________________ > skunkworks mailing list > skunkworks@lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
@Okechukwu if indeed thats the case then its a big problem. The big question would be how to apply the "new feature" retroactively. On Sun, Jun 14, 2015 at 11:02 PM, michaelbomett via skunkworks < skunkworks@lists.my.co.ke> wrote:
My first google account registered in 2006 had a dot between my names then later after forgetting the password I registered without the dot and it accepted. These days I still get emails from both. I consider it as a feature but originally it wasn't.
On Sun, 14 Jun 2015 at 21:55 Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Maybe it isn't because you have just discovered about it now yet it has been a problem for over 5 years or so. Google did clean up its act by now not allowing you to create these aliases, but like I said, oke.chukwu@gmail and okechukwu@gmail both do exists and they never created themselves, did they?
./Ok3ch
On Sun, Jun 14, 2015 at 6:43 PM, Brian Ngure <brian@pixie.co.ke> wrote:
No, you can't. Try it yourself. I also don't see any security flaw.
On Sun, Jun 14, 2015 at 8:32 PM, Areba Collins <arebacollins@gmail.com> wrote:
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw.
Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks < skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote:
Hmmmm...came to my email
Kind Regards,
Kennedy KK
Mobile: +254721699119 Skype: k.kairu Gtalk: kkairu
On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> wrote:
> Test > > On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via > skunkworks <skunkworks@lists.my.co.ke> wrote: > >> Mr Mark, dots are recognized as unique usernames kkairu and k.kairu >> are different. >> >> >> Kind Regards, >> >> Kennedy KK >> >> Mobile: +254721699119 >> Skype: k.kairu >> Gtalk: kkairu >> >> >> On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < >> skunkworks@lists.my.co.ke> wrote: >> >>> Gentlemen I believe you will find this is a feature and not a >>> security >>> issue. Reason being that dots are not recognised as characters in >>> Gmail >>> usernames. >>> >>> This can be easily proven by attempting to login to the "wrong" >>> email >>> address with your valid password. >>> >>> On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: >>> > Skunks, >>> > >>> > My mail address is pkmugoh@gmail.com and I have sent an email >>> to pk.mugoh@gmail.com and received it as well as replied to it. >>> I think this is a bad security flaw on googles part. >>> > >>> >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks@lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >> >> >> _______________________________________________ >> skunkworks mailing list >> skunkworks@lists.my.co.ke >> ------------ >> List info, subscribe/unsubscribe >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke >> > >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, Collins Areba, P.O Box 44441, 00100 Nairobi, Kenya. Tel: +254 707 750 788 / 720 516 758 Twitter: @arebacollins. Skype: arebacollins
@Collins you got the words out of my mouth - Google cannot claim to have this as a feature after it was initially a flaw and the flaw with past accounts has never been fixed. It was actually a big battle with the Internet community for them to even admit it first, and then silently fix it from one moment going forward. ./Ok3ch On Mon, Jun 15, 2015 at 6:10 AM, Collins Areba <arebacollins@gmail.com> wrote:
@Okechukwu if indeed thats the case then its a big problem. The big question would be how to apply the "new feature" retroactively.
On Sun, Jun 14, 2015 at 11:02 PM, michaelbomett via skunkworks < skunkworks@lists.my.co.ke> wrote:
My first google account registered in 2006 had a dot between my names then later after forgetting the password I registered without the dot and it accepted. These days I still get emails from both. I consider it as a feature but originally it wasn't.
On Sun, 14 Jun 2015 at 21:55 Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Maybe it isn't because you have just discovered about it now yet it has been a problem for over 5 years or so. Google did clean up its act by now not allowing you to create these aliases, but like I said, oke.chukwu@gmail and okechukwu@gmail both do exists and they never created themselves, did they?
./Ok3ch
On Sun, Jun 14, 2015 at 6:43 PM, Brian Ngure <brian@pixie.co.ke> wrote:
No, you can't. Try it yourself. I also don't see any security flaw.
On Sun, Jun 14, 2015 at 8:32 PM, Areba Collins <arebacollins@gmail.com> wrote:
The question is, can someone create a new account using any of those aliases? Me thinks not. If that is the case, I fail to see the security flaw.
Sent from my iPhone
On Jun 14, 2015, at 7:18 PM, Brian Ngure via skunkworks < skunkworks@lists.my.co.ke> wrote:
The point is, they provide a service. How they do it is entirely up to them. If they want to ignore dots/periods, that is their choice. If they don't want to follow the RFC, it is their choice.
On Sun, Jun 14, 2015 at 7:04 PM, Okechukwu via skunkworks < skunkworks@lists.my.co.ke> wrote:
Issue is, Google cannot wake up and decide what a character is as far as an email address is concern - the RFC for this is clear the allowed characters and they decide to be non-RFC compliant and breaking email - issue is they don't give a damn.
./Ok3ch
On Sun, Jun 14, 2015 at 4:48 PM, Kennedy Kairu Kariuki via skunkworks <skunkworks@lists.my.co.ke> wrote:
> Hmmmm...came to my email > > > Kind Regards, > > Kennedy KK > > Mobile: +254721699119 > Skype: k.kairu > Gtalk: kkairu > > > On Sun, Jun 14, 2015 at 6:30 PM, Bwana Lawi <mail2lawi@gmail.com> > wrote: > >> Test >> >> On Sun, Jun 14, 2015 at 2:10 PM, Kennedy Kairu Kariuki via >> skunkworks <skunkworks@lists.my.co.ke> wrote: >> >>> Mr Mark, dots are recognized as unique usernames kkairu and >>> k.kairu are different. >>> >>> >>> Kind Regards, >>> >>> Kennedy KK >>> >>> Mobile: +254721699119 >>> Skype: k.kairu >>> Gtalk: kkairu >>> >>> >>> On Sun, Jun 14, 2015 at 12:48 PM, Mark Kipyegon via skunkworks < >>> skunkworks@lists.my.co.ke> wrote: >>> >>>> Gentlemen I believe you will find this is a feature and not a >>>> security >>>> issue. Reason being that dots are not recognised as characters in >>>> Gmail >>>> usernames. >>>> >>>> This can be easily proven by attempting to login to the "wrong" >>>> email >>>> address with your valid password. >>>> >>>> On 14/06/2015 12:18, Peter Mugoh via skunkworks wrote: >>>> > Skunks, >>>> > >>>> > My mail address is pkmugoh@gmail.com and I have sent an email >>>> to pk.mugoh@gmail.com and received it as well as replied to it. >>>> I think this is a bad security flaw on googles part. >>>> > >>>> >>>> >>>> _______________________________________________ >>>> skunkworks mailing list >>>> skunkworks@lists.my.co.ke >>>> ------------ >>>> List info, subscribe/unsubscribe >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>> ------------ >>>> >>>> Skunkworks Rules >>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>> ------------ >>>> Other services @ http://my.co.ke >>>> >>> >>> >>> _______________________________________________ >>> skunkworks mailing list >>> skunkworks@lists.my.co.ke >>> ------------ >>> List info, subscribe/unsubscribe >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> ------------ >>> >>> Skunkworks Rules >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>> ------------ >>> Other services @ http://my.co.ke >>> >> >> > > _______________________________________________ > skunkworks mailing list > skunkworks@lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards
Brian Ngure
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba, P.O Box 44441, 00100 Nairobi, Kenya. Tel: +254 707 750 788 / 720 516 758 Twitter: @arebacollins. Skype: arebacollins
I get quite a number of emails/notifications sent to *odhiambo*@gmail.com while my address is simply odhiambo@gmail.com. Raised this with Google Tech Support and nothing was done. I simply ignore them these days. On 14 June 2015 at 12:18, Peter Mugoh via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks,
My mail address is pkmugoh@gmail.com and I have sent an email to pk.mugoh@gmail.com and received it as well as replied to it. I think this is a bad security flaw on googles part.
Regards,
Peter Mugoh Sent from my BlackBerry®
-----Original Message----- From: Bwana Lawi via skunkworks <skunkworks@lists.my.co.ke> Date: Sun, 14 Jun 2015 08:08:54 To: Solomon Mbũrũ Kamau<solo.mburu@gmail.com>; Skunkworks Mailing List< skunkworks@lists.my.co.ke> Reply-To: Bwana Lawi <mail2lawi@gmail.com>, Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] Gmail Security Gone Bonkers?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
Interesting they actually now warn you about the period, after they had denied that it was a flaw!!! ./Ok3ch Sent from my iPad
On Jun 14, 2015, at 06:08, Bwana Lawi via skunkworks <skunkworks@lists.my.co.ke> wrote:
What's even stranger is that google/gmail will not allow new email address to be created if there is any variation (with or without the characters) of the address already existing.
<image.png>
On Sat, Jun 13, 2015 at 11:06 PM, Solomon Mbũrũ Kamau <skunkworks@lists.my.co.ke> wrote: Strange.
For me I get the unrecognized login attempt as well receive emails when someone sends email to solomburu@gmail.com yet my email address is solo.mburu@gmail.com
On 13 June 2015 at 16:46, Jared Koyier via skunkworks <skunkworks@lists.my.co.ke> wrote: After a serious review, i realized that the owner of the gmail account (otienojoelochieng@gmail.com) is known to me. He once tried to con me by claiming to have wired cash to my bank account via internet banking,he forwarded me an email from Family bank to confirm this con. I bursted him n he spent some days in the cells. I guess he must have tried to hack my gmail and probably with lack of knowledge put my email address and my phone number as his recovery details. So when he logged on from a new location, the notification was forwarded to me.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (16)
-
Areba Collins -
Brian Ngure -
Bwana Lawi -
Collins Areba
-
Jangita -
Jared Koyier -
Jimmy Thuo -
Job Muriuki -
Kennedy Kairu Kariuki -
Mark Kipyegon -
michaelbomett -
Mwendwa Kivuva -
Odhiambo Washington -
Okechukwu -
Peter Mugoh -
Solomon Mbũrũ Kamau