could I create fake .eml files and run the restore and my gmail account will show messages that I never sent

[gybfan]

could I create fake .eml files and run the restore and my gmail account will show messages that I never sent

 

for example

an email I sent to 'susan' telling her to pick up the winning lottery number

 

and then I ask 'susan' if she received message, (which she of course did not) and I show the message from days ago in my browser gmail sent box

[Bri Hatch]

Circa Fri, Jun 7, 2013 at 7:11 PM, gybfan <respon...@gmail.com> cackled:

> could I create fake .eml files and run the restore and my gmail account will
> show messages that I never sent

You could just as easily (probably easier) craft a fake email and
upload it via IMAP.

If the email is suposedly from a service that does DKIM signatures
then there's some higher proof that it was actually legitimate
email, depending on which bits of it were verified - typically just
to/from/subject/date and other headers, not full body content
for Gmail, for example.

Yes. You're welcome to try to craft fake email with GYB or other tools.
How successful you are depends on how rigorous the investigation.

--
Bri Hatch, Systems and Security Engineer. http://www.ifokr.org/bri/

If Bill had a dollar for every time Windows crashed...

Oh wait -- he does.

[joe]

So this would work in gmail if i copy paste one eml file and change time and then upload via gyb

--
--
You received this message because you are subscribed to the Google
Groups "Got Your Back: Gmail Backup" group.
To post to this group, send email to got-yo...@googlegroups.com
To unsubscribe from this group, send email to
got-your-bac...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/got-your-back?hl=en?hl=en

---
You received this message because you are subscribed to a topic in the Google Groups "Got Your Back: Gmail Backup" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/got-your-back/IJOz26ghF7g/unsubscribe?hl=en.
To unsubscribe from this group and all its topics, send an email to got-your-bac...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[Bri Hatch]

Except that the dkim check would fail, indicating that you're trying to pull a fast one.

If one actually checked that far.

You received this message because you are subscribed to the Google Groups "Got Your Back: Gmail Backup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to got-your-bac...@googlegroups.com.

[joe]

I do not know what a dkim check is.

Would I be able to log into gmail with a browser (or smartphone) and see the fake email on gmail.com

[Bri Hatch]

Close to Sun, Jun 9, 2013 at 5:21 PM, joe <respon...@gmail.com> conversed:

> I do not know what a dkim check is.
> Would I be able to log into gmail with a browser (or smartphone) and see the
> fake email on gmail.com

At this point, I think we've left the academic. Have fun.

--
Bri Hatch, Systems and Security Engineer. http://www.ifokr.org/bri/

Don't interrupt me when I'm talking to myself.