Full Disclosure mailing list archives

Re: obtai an IP of an MSN Messenger contact


From: n3td3v <n3td3v () gmail com>
Date: Wed, 5 Apr 2006 20:22:55 +0100

And from a corporate hackers prospectus, its a very useful thing. Yahoo
backyard host names all have the corporate ID of the person who uses the
computer on their hostname, Yahoo are a laughing stock as far as this is
concerned. They use "corpid.corp.yahoo.com", so straight away the k1ds know
the corporate login of the user, the real name of the user and the corporate
e-mail of the user, and i'm sure Yahoo isn't the only stupid dot-com to do
this.

On 4/5/06, n3td3v <n3td3v () gmail com> wrote:

And they don't just look to target one machine, once they get the
information, they will go for the entire ISP... and look to drive-by
everyone with all the public 0-day the world has on offer. Yahoo Messenger
at no time alerts its users, "do you want to p2p message with this buddy?",
they just secretly do it in the background. Only technical users are aware
of whats going on, the rest of the teen market, single moms, retired couples
are left victim to the problem.


On 4/5/06, Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu> wrote:

On Wed, 05 Apr 2006 20:11:42 +0200, =?ISO-8859-1?Q?Vidar_L=F8kken?=
said:

Could you care to explain why I should care if Joe R. Andom Cracker
has my
from yahoo IM?

Because J. Random Skiddy thinks you insulted the size of both inches of
his
manhood, and he wants to add 4 inches by using his botnet to hose your
IP down.




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: