PayPal, Google team in anti-phishing initiative

By Michael Hatamoto | Published July 8, 2008, 5:46 PM

With phishing attacks and fraudulent e-mails still slipping through Google Gmail's security walls, the Mountain View-based company plans to work with eBay and its PayPal unit in an effort to protect e-mail users.

In an agreement announced today, Google and eBay will use DomainKeys and DomainKeys Identified Mail e-mail authentication technology to help stop fraudulent e-mails enter the Gmail inboxes. The DomainKey helps an ISP to determine whether or not a specific e-mail is authentic, and if it should be delivered. Developed by Yahoo, any e-mail sent with a DKIM will have a type of cryptographic signature that must be accepted by an e-mail server -- this case Gmail.com -- before being accepted.

Every e-mail from ebay.com or paypal.com will now be authenticated beforehand, and e-mails that are rejected will automatically be deleted.

As the largest auction house in the world, eBay is a popular target among phishers hoping to steal account information from customers, which could lead to false bids and loss of payment information. E-mail security teams have been entrenched in a long-term battle not just against spammers, but more and more against phishers. Earlier this year, the University of Puerto Rico's Information Security Research Team (INSERT) discovered in a proof of concept (PoC) test attack, it could send a bulk e-mail to 4,000 people using a single Gmail account.

And in February, the Computers and Humans Apart (CAPTCHA) test, designed to stop spam bots from signing up on a Web site and sending out e-mails, was compromised for the first time.

Today's partnership comes as Google revamps Gmail's security features, including enabling Gmail users to view the number of simultaneous logins to their accounts, and to remotely log out.

View comments by with a score of at least

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.