PaulDotCom mailing list archives

Username Check


From: dimitrios at gmail.com (Dimitrios Kapsalis)
Date: Mon, 27 Oct 2008 14:10:52 -0500

Good point. I tried one and it said i was member but wasn't actual.

2008/10/27 Dan McGinn-Combs <dgcombs at gmail.com>

Are they really checking or simply *collecting* usernames themselves. Looks
like a nifty toy to do that with.

On Mon, Oct 27, 2008 at 9:09 AM, xgermx <xgermx at gmail.com> wrote:

http://www.usernamecheck.com/ is a simple website that shows where you
have a username registered (checks against 75 different sites). To a
normal web user, this probably seems bengin, but from the attacker POV
this is gold.
Pauldotcom - registered on 13 sites, that leaves at least 62
opportunities for social engineering.
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com




--
Dan McGinn-Combs, Security+, GSEC, CISSP, CISA
dgcombs at gmail.com
Grand Central: +1 404 492 7532
Peachtree City, Georgia USA

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20081027/a2eeffad/attachment.htm 


Current thread: