RE: How to obtain a yahoo username off a computer

[Ben Schorr <bms () hawaiilawyer com>]

In my opinion this is a perfectly appropriate question for the list.  It got
me (and probably a lot of others) thinking about how an unscrupulous user
might try to crack our security.  Not that we're big Yahoo! users but a lot
of the tricks mentioned would work for other things as well.

It's been very thought-provoking.

My $.02.  Keep the change.

-Ben-
Ben M. Schorr, MVP-OneNote, CNA, MCPx4
Director of Information Services
Damon Key Leong Kupchak Hastert
http://www.hawaiilawyer.com
 

> -----Original Message-----
> From: Tim Laureska [mailto:hometeam () goeaston net] 
> Sent: Wednesday, June 11, 2003 15:44
> To: seeliger.curt () epa gov
> Cc: security-basics
> Subject: RE: How to obtain a yahoo username off a computer
>
> Curt is absolutely right... I was amazed at how quickly 
> people responded with various mechanisms to do what was 
> originally asked... I would hope that the new Security Basics 
> List administrator might pick up on this potential social 
> engineering ... For all we know this could be some 13 year 
> old kid trying to get into a friend's A/C (no offence meant 
> to the original author).... paranoia is definitely part of the game!
>
> I finish with a question ....Is this an appropriate question 
> for this list?
>
>
> -----Original Message-----
> From: Curt Seeliger [mailto:seeliger.curt () epa gov]
> Sent: Wednesday, June 11, 2003 7:53 PM
> To: security-basics () securityfocus com
> Subject: Re: How to obtain a yahoo username off a computer
>
>
> There's been a variety of helpful responses to the original 
> request now.
>
> There are good reasons for doing what he wants to do, but 
> (and I'm in no
>
> way impuning the original poster by asking this) there are 
> some crummy 
> reasons as well.
>
> How do any of you know this isn't part of a stalking, or 
> background info
>
> for more social engineering, or yada? Near as I know, you 
> don't.  Sure, 
> this is worst case scenario, but isn't paranoia part of the game?
>
> > -----Original Message-----
> > To: security-basics () securityfocus com
> > Subject: How to obtain a yahoo username off a computer
> >
> > Hello!  We have a security issue and need to know who is using a
> > particular Yahoo user ID from within our company.  We are about 90%
> > certain of the person's identity.  This user has been deleting his
> > cookies and temp Internet files.  We want to search his computer to
> see
> > if Yahoo ID xxxx is somewhere on his computer.   We know the Yahoo
> user
> > ID - we just need to confirm that this person is using it.  We don't
> > want to contact Yahoo because we don't want to go down the 
> legal road
> > needed to get them to release the info.  Any ideas?
> > Thanks,
>
> -- 
> Curt Seeliger, Data Ranger          
> CSC, EPA/WED contractor
> 541/754-4638                      
> seeliger.curt () eqa gov           
>
> --------------------------------------------------------------
> ----------
> ---
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
> analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure remote access
> in
> about an hour, with no client, server changes, or ongoing maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> --------------------------------------------------------------
> ----------
> ----
>
>
>
>
>
>
> --------------------------------------------------------------
> -------------
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by 
> top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure 
> remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> --------------------------------------------------------------
> --------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------