Phishing message alert

June 20, 2015 Leave a comment

If you receive messages with the subject “Pending message” that appears to have been sent from “Runbox Admin” <cusdept@nullrunbox.com>

or

Subject “Account Update” that appears to come from “MEMBERSHIP SERVICE” <membership@nullrbox.com>, please delete them.

We are deleting all the instances of these messages we can find on the Runbox servers, but we might miss some.

These messages are not sent from Runbox staff and are an attempt to trick Runbox customers into entering their login information at malicious websites.

For more information about phishing, please see the Phishing section of this article.

Continue Reading →

New IMAP Server Software in Open Beta Test

June 16, 2015 Leave a comment

We are pleased to announce the start of the Open Beta Testing Phase of our new Dovecot IMAP servers.

We are introducing new IMAP servers to resolve errors that have been experienced by many customers, to simplify the set up in email clients and to improve IMAP performance.

We expect that customers using Apple Mail (OS X) and the native Mail app (iOS) on iPhones and iPads will see the most benefit from our new servers, but performance and reliability will be improved for all customers.

Problems we believe will be resolved are:

  • Read/Unread synchronisation issues
  • Moving messages from one folder to another resulted in a copy in the new and old locations
  • Error messages of the kind “Cannot connect to server”
  • With iOS the native Mail app would fail to update and would continue to show a date in the past

At some future date the current servers will be retired, and all customers will need to use the new IMAP servers.

If you would like to switch to the new servers now, and take part in our Beta testing phase, please see the information on the Open Beta Phase page (the previous link now directs to the official launch details). Please note that although the software is already thoroughly tested and performing well, changes and disruptions may occur as we continue improving it.

If you have any questions about these changes, please contact Runbox Support.

 

Continue Reading →

Terms of Service and Privacy Policy updates

May 31, 2015 Leave a comment

On July 1st, 2015 Runbox will introduce updated Terms of Service and a more detailed Privacy Policy.

We strongly recommend that you review the documents as they comprise the contract between you and Runbox. They also form the backbone of legal protection of your data, anchored in strong Norwegian privacy regulations.

We have worked hard to make the documents clear, balanced, and easy to understand, and we think you will agree upon reviewing them.

Please note that the changes apply to all current and future Runbox accounts, and that by continuing to use Runbox you in effect accept the updated terms and policies.

(more…)

Continue Reading →

Domains and Privacy

May 22, 2015 Leave a comment

From time to time we get asked why Runbox uses runbox.com as our primary email domain rather than our runbox.no domain.

The reason we are asked this is because some people assume that by using a .com domain all the Internet traffic to and from our servers is routed via the Unites States, and could be subject to US government eavesdropping.

(more…)

Continue Reading →

Outlook for iOS – Privacy Issues

May 6, 2015 Leave a comment

Email Apps and Privacy

Back in May 2014 we reported on our investigations in to two smartphone/tablet apps that had been launched. We were worried to find that the apps did not use our outgoing SMTP servers directly, and instead sent email through non-Runbox servers. This made for much easier set up of accounts, but we didn’t like that it wasn’t obvious to the user what was going on.

Those apps were myMail and Evomail (the later is no longer available).

Outlook and Privacy

Outlook now has IMAP compatibility and is able to work with Runbox accounts, however, like myMail and Evomail it doesn’t connect directly to the Runbox SMTP servers for outgoing mail. In fact, we don’t know if it retrieves email directly from our servers either. We do know that it stores some details of your account on servers that are part of Amazon Web Services.

If this doesn’t bother you, then that’s fine as Outlook is turning in to a nice email app that sits nicely alongside the other Microsoft offerings for iOS and Android.

Using Email Apps that Connect Directly to the Runbox Service

We believe that for maximum security and privacy email apps should be connecting directly to the Runbox service and not connecting via other servers, or storing account details anywhere other than in the app on the device.

Usually if you have to enter the server details for incoming and outgoing mail then the app is likely to connect to those services directly. If you have any doubts about an app, please get in touch with Runbox Support and we will investigate how it behaves.

Continue Reading →

[Resolved] Disrupted service 16.04.2015

April 16, 2015 1 Comment

We had 2 hours of downtime today that was caused by electrical problems that took out our Top of the Rack switches.

The problem was between 14:00 and 16:00 and was fixed by an electrician at the data center.

We are very sorry about the problems this caused for our users and we will be looking at ways to avoid any similar event in the future.

You can follow us on Twitter for more instant updates: https://twitter.com/runbox

UPDATE: After the power outage one of the spam filter servers did not restart as it should have, causing some spam to not be caught. The server is being restarted now and spam filtering should return to normal shortly.

Continue Reading →

Phishing warning

January 26, 2015 Leave a comment

If you receive a message with the subject “Dear Runbox User” or “RUNBOX.COM” (or similar) which asks you for your Runbox username and password, or asks you to click on a suspicious link, then please delete the message. We are deleting all the instances of this message we can find in Runbox accounts, but we might miss some.

These messages are not sent from Runbox staff and is an attempt to trick Runbox customers into entering their login information at a malicious website.

When Runbox contacts you we will always address you by your name, and we will never ask you for your login details.

For more information about phishing, please see the Phishing section of this article.

Continue Reading →

Notice to Apple Mail users regarding APOP

January 8, 2015 Leave a comment

Today we disabled SSL 3.0 for POPS (Secure POP) and changed how we terminate POP connections to make it more secure.

Some Apple Mail users are using the server address apop.runbox.com and/or the authentication setting: Authenticated POP (APOP) in Apple Mail.

To change the account settings, please follow these instructions:

  1. Mail => Preferences to open the Accounts dialog.
  2. Select your Runbox account in the left pane.
  3. In “Incoming Mail Server”, enter: secure.runbox.com
  4. Click the Advanced button.
  5. Make sure the port is set to: 995
  6. Under “Authentication”, select: Password (Previously Authenticated POP)
  7. Click the red button in the top left corner to close Accounts.
  8. Click Save.

We added a Apple Mail compatible setup on the 13th of February 2013 after an update to Mail from Apple broke authentication for many users.

The new settings is a more secure way of using POP and will make sure your connection with our servers always use TLS (Transport Layer Security) or it will fail.

Continue Reading →