<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Security hipsters, I need some advice or ideas. We have a group of family history researchers, about a dozen of us who work together, share photos, family lore, findings from DNA and so forth. Recently one of our circle went off her meds and did a lot of damage by hacking into another member’s email and writing messages to the other members with a false From line, all with carefully calculated malice. It has us really freaked, because this cousin is very unpredictable and has a lot of brains and a lot of ill will, with more internet protocol savvy than the rest of us combined (she is a computer security expert.)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am thinking of a way to write some kind of code word or something into our email such that it would be evidence the message is from who it says. Is there a standard way of doing this? We can exchange the code word via phone so if the party in question has access to our email, it wouldn’t be intercepted. Ideally it would be some kind of rotating code, different with each message but derived by some kind of externally-accessible information, not easily guessed. An example would be the F10.7 cm radiation average from the sun on a given day. That could be looked up each day and put in the email message somewhere. Archives exist, so we could even go one year back. Ideally we would want a code that changes by the hour. Ideas please? What do you security guys do to verify a sender?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I don’t think my email has been compromised, so posting here or privately is OK.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>spike<o:p></o:p></p></div></body></html>