Psycho-Babble Administration Thread 8098

Shown: posts 1 to 7 of 7. This is the beginning of the thread.

 

Site Security « kitkat

Posted by Dr. Bob on November 5, 2002, at 19:50:40

[Posted by kitkat on November 5, 2002, at 14:58:42]

> Not sure if this is the right place to report this, but I received an e-mail today from a sender using my Psycho Babble screen name followed by numbers, with a blind carbon copy to my ISP e mail account.
>
> The only place I use that particular screen name is on a Psycho Babble message board, and I am concerned that someone is accessing that info as well as my e mail account name.
>
> Please let me know if your IT people can stop this, or let me know how to delete my account with you.
>
> It's a shame if hackers and spammers have violated a private site which appears to help a lot of people.

 

Re: Site Security

Posted by Dr. Bob on November 5, 2002, at 19:53:28

In reply to Site Security « kitkat, posted by Dr. Bob on November 5, 2002, at 19:50:40

> > Not sure if this is the right place to report this

This is the right board, but it's a new topic, so I started this new thread...

> > I received an e-mail today from a sender using my Psycho Babble screen name followed by numbers, with a blind carbon copy to my ISP e mail account.

Can you forward that email to me? With all its headers, if you know how to do that?

dr-bob@uchicago.edu

> > It's a shame if hackers and spammers have violated a private site which appears to help a lot of people.

It would be, but I wouldn't assume that's what's happened...

Bob

 

Re: Site Security

Posted by oracle on November 6, 2002, at 11:06:42

In reply to Re: Site Security, posted by Dr. Bob on November 5, 2002, at 19:53:28

kitkat is a pretty common user name.

 

Re: Site Security - Could it be a Cookie Stealer?

Posted by fachad on November 6, 2002, at 12:21:03

In reply to Site Security « kitkat, posted by Dr. Bob on November 5, 2002, at 19:50:40

Could someone have got hold of this information by getting to the cookies on your PC, rather than any lapse of security on PSB?

I think that some spyware works by reading all your cookies.

Just a possibility - Dr. Bob, could this be how this happened or do you think it was a security breach at PSB?


> [Posted by kitkat on November 5, 2002, at 14:58:42]
>
> > Not sure if this is the right place to report this, but I received an e-mail today from a sender using my Psycho Babble screen name followed by numbers, with a blind carbon copy to my ISP e mail account.
> >
> > The only place I use that particular screen name is on a Psycho Babble message board, and I am concerned that someone is accessing that info as well as my e mail account name.
> >
> > Please let me know if your IT people can stop this, or let me know how to delete my account with you.
> >
> > It's a shame if hackers and spammers have violated a private site which appears to help a lot of people.

 

Re: Could it be a Cookie Stealer?

Posted by Dr. Bob on November 6, 2002, at 20:36:28

In reply to Re: Site Security - Could it be a Cookie Stealer?, posted by fachad on November 6, 2002, at 12:21:03

> Could someone have got hold of this information by getting to the cookies on your PC, rather than any lapse of security on PSB?

"This information" = their posting name? That is in fact stored, unencrypted, in a cookie...

> Just a possibility - Dr. Bob, could this be how this happened or do you think it was a security breach at PSB?

I'm biased, of course, but I don't think it's a security breach on this end. But I don't know anything about "cookie stealers". And I'd really like to see that email...

Bob

 

Re: Could it be a Cookie Stealer? » Dr. Bob

Posted by kitkat on November 7, 2002, at 17:02:31

In reply to Re: Could it be a Cookie Stealer?, posted by Dr. Bob on November 6, 2002, at 20:36:28

Thanks for info on "cookie stealers". Tho I don't know anything about them, it has been a while since I dumped my temp files so I'll do that.

Dr. Bob, I forwarded the original e-mail to you on 11/6 at dr-bob@uchicago per your request didn't you receive? I'll reforward today, but in case it doesn't forward, here's the URL I copied from its link, there were no headers:

http:/www.nestd.urq64438key=5417164438index=kkj217164438.5334202@c1010.hudjheuhfnnvgxvbchnfhfujryyfgbch.co.uk/a/clickthru.cgi?id=vegas

I had to copy above by hand, for some reason my copy and paste wouldn't work on it.

Clicking on the link takes you to a mortgage company site. I'm really curious about what's going on and would appreciate being kept up to date.

Thanks to all,

KK

 

Re: Could it be a Cookie Stealer?

Posted by oracle on November 8, 2002, at 14:20:19

In reply to Re: Could it be a Cookie Stealer? » Dr. Bob, posted by kitkat on November 7, 2002, at 17:02:31

> Dr. Bob, I forwarded the original e-mail to you on 11/6 at dr-bob@uchicago per your request didn't you receive? I'll reforward today, but in case it doesn't forward, here's the URL I copied from its link, there were no headers:

Hmmmmm.... without headers an email cannot go anywhere, so if you got it, it has to have headers

>
> http:/www.nestd.urq64438key=5417164438index=kkj217164438.5334202@c1010.hudjheuhfnnvgxvbchnfhfujryyfgbch.co.uk/a/clickthru.cgi?id=vegas
>
> I had to copy above by hand, for some reason my copy and paste wouldn't work on it.
>
> Clicking on the link takes you to a mortgage company site. I'm really curious about what's going on and would appreciate being kept up to date.
>
> Thanks to all,
>
> KK


Congradulations ! You have been spamed. The selection of kitkat was at random.


This is the end of the thread.


Show another thread

URL of post in thread:


Psycho-Babble Administration | Extras | FAQ


[dr. bob] Dr. Bob is Robert Hsiung, MD, bob@dr-bob.org

Script revised: February 4, 2008
URL: http://www.dr-bob.org/cgi-bin/pb/mget.pl
Copyright 2006-17 Robert Hsiung.
Owned and operated by Dr. Bob LLC and not the University of Chicago.