Improsec Blog How I killed BT's payphone email service

Did you know that until recently you could send an email from the iconic payphones in the UK? This antiquated service was discontinued from all BT payphones this year thanks to Improsec Security Advisor Martin Sohn Christensen.  On a trip to London, he discovered he could spoof the @bt.com address from the payphones and thereby undermine BT’s email security controls – SPF and DMARC. See how Martin did it here.