Bugtraq mailing list archives

Re: Hotmail message view exploit


From: "Jome" <jome () emoj net>
Date: Sun, 19 Aug 2001 19:36:37 +0200

It also helps to know that from the message numbers,
in you own hotmail inbox,you can see about what time
is what message number been used. eg:

MSG997936971.27 arrived on 16.08.2001.
MSG996698372.27 arrived on 01.08.2001.
MSG975960863.0  arrived on 04.12.2000.

The numbers after MSG and before the dot (i.e. 997936971, 996698372 and 975960863) is a UNIX timestamp which means, if 
I've understood this correctly, that you have to know exactly when a message has arrived. I dont't know about the 
number after the dot, but it may be the number of the message received at that exact second.

Even if you have a scanner, wouldn't it be thousands of messages to scan even if you knew which minute a message has 
arrived?

 - Jome


Current thread: