Security Basics mailing list archives

RE: Unrecognized folder in Hotmail Inbox.


From: "matt willson" <mwillson () sbcglobal net>
Date: Sun, 10 Aug 2003 22:17:23 -0700

In response to this response.

A.) if it's a spyware client or something similar that's attached to his
IE, switching email providors has no affect on this.
B.) It could have been an error on the MS side
A year ago I took a couple c classes with a Hotmail OPS admin, Here in
San jose at the local community college, and he showed me a couple of
things with Hotmail, including how buggy it is daily. He requested to
get transferred out of the development dept to OPS due to the daily
headaches of their buggy ass crap software. He also sold me 20k of
hotmail emails to spam. Muahaha 
C.) If you've ever done some packet sniffing on networks, you'll notice
that Yahoo's encryption is crap, almost non existant. They send
passwords plaintext over networks, and lousyily at that. 
D.) MS OPS do work daily on enforcing and developing more secure
applications for networking, including email encryption. So I'd go thru
them, as I do for a spare account.

Look deeper into problems, to research their cause and affect. Don't
bury the car because people keep breaking into the windows.

Somethin like that...
matt

-----Original Message-----
From: Jeff MacDonald [mailto:jam () zoidtechnologies com] 
Sent: Thursday, August 07, 2003 10:29 AM
To: security-basics () securityfocus com
Subject: Re: Unrecognized folder in Hotmail Inbox.

On Thu, 2003-08-07 at 00:44, dagreat1 () hush com wrote:
heya, 
I loged onto my hotmail account and was surprised to see a folder in
there. 
The folder would be the last one in the "Inbox" "Trash" etc etc field
on the left side of the page. 
It said, Sonrie www.sonrie.net
It was empty, and i deleted this at once. 
A wise guess could be that i was using IE5 in a netcafe and might have
read a possibly malicious email, containing some script(IE force
exploit
etc) which could execute arbitary code on my computer. 
But then again, the making of that folder is on the hotmail servers
and
requires Server side scripting. 
I am a little confused. 
Any Wise ideas are welcome. 
Thanks.


greetings,

(1) use yahoo instead of hotmail
(2) contact hotmail customer support and ask what is going on.

regards,
J
-- 
Jeff MacDonald <jam () zoidtechnologies com>


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: