Full Disclosure mailing list archives

Re: This sums up Yahoo!s security policy to a -T-


From: n3td3v <xploitable () gmail com>
Date: Thu, 23 Dec 2004 11:35:58 +0000

On Wed, 22 Dec 2004 17:59:25 -0800, morning_wood <se_cur_ity () hotmail com> wrote:

What's in that mailbox is/was mine, none of your business unless I chose
to share it.

i couldnt agree more... another case of lame, illogical media bullshit
BRAVO YAHOO

happy hollidays,

m.w
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


A few pointers here to remember:
- They reckon he was saving drafts of e-mails to send when he had net
access. Not all of these drafts were sent before he was obviously
murdered.
- He was only using the e-mail account to communicate between friends
or family. It isn't like he has secret e-mails he wouldn't want his
family to read, example: some love affair etc with some random chick.
- Other e-mail providers like AOL have already given families access
to accounts of the e-mail used to send messages from battle.
- Sure, corporation need tight privacy policies, although if a
corporation like Yahoo! are going to be this tight, then surely there
should be an "appeal" system setup in special high profile cases, like
this one. This would be the best way to go, than putting families of
war dead, through extra pain when dealing with a loss of life.
- I personally think Yahoo! could easily allow them access in private,
turning a blind eye in this special circumstance. Which as I mentioned
above, an appeal process would give room for, obviously.
- This account should at least be taken out of the deactivation
process and deletion, until all legal angles have been ventured.
- If all else fails, its not rocket science for some hacker/script
kiddie to do the family a favour and crack the password and/or account
information and e-mail a family member the details.

Thanks, n3td3v
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: