RE: How to obtain a yahoo username off a computer

[Kerberus <kerberus () microbsd net>]

That would be true if he used the Yahoo Messenger, Lets take this a step
further though, say he isnt using the messenger client, your only hope
then to locate said id is from the browser cache, or a caching
proxy..... your chance could provide result with a recursive search
through the cache for the word yahoo.. though unlikely.... best bet
honestly an OpenBSD bridge running webspy, or urlsnarf will easily pick
that up... just have it tail the log output and it can be easily plugged
into the network and brought online while said person is at lunch or
something. word of caution if this is going to turn into a legal or HR
battle you better log everything and keep good records of what you did
and when.

On Wed, 2003-06-11 at 17:01, Nycum, Joe wrote:
> You will find the User ID in the registry 
> "HKEY_CURRENT_USER\software\Yahoo\Pager" 
>
> -----Original Message-----
> From: Potter, Tim [mailto:Tim.Potter () clarkconsulting com] 
> Sent: Wednesday, June 11, 2003 1:01 PM
> To: security-basics () securityfocus com
> Subject: How to obtain a yahoo username off a computer
>
> Hello!  We have a security issue and need to know who is using a
> particular Yahoo user ID from within our company.  We are about 90%
> certain of the person's identity.  This user has been deleting his
> cookies and temp Internet files.  We want to search his computer to see
> if Yahoo ID xxxx is somewhere on his computer.   We know the Yahoo user
> ID - we just need to confirm that this person is using it.  We don't
> want to contact Yahoo because we don't want to go down the legal road
> needed to get them to release the info.  Any ideas?
> Thanks,
> -Tim
>
> ---------------------------------------------------------------------------
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> ----------------------------------------------------------------------------
>
> ---------------------------------------------------------------------------
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> ----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------