Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Warning to Yahoo & ICQ users
- This topic has 11 replies, 8 voices, and was last updated 22 years, 9 months ago by
Johnson.
-
AuthorPosts
-
June 3, 2003 at 3:39 am #13246
Johnson
MemberTheres an exploit that some friends of mine use, if you have ever used ICQ, or are using it now, if they know your email, they can search it to get the birthday and city/zip code you gave when u signed up for ICQ. And they use this to get info to crack Yahoo! accounts.
I had a friend search edited‘s email and got his info and used it on his yahoo account to check it, his bday is edited, zipcode is edited, secret question is edited? If i wanted to be mean i coulda reset his password to his alt email and messed with him, i did try the answer edited, but it didn’t work, is the name of a edited i saw in one of the pics on this site, lol, if he hadn’t apologized the other day i mighta thought about seeking the answer to his secret question lol, if i had taken it i woulda given it back, im only using him to teach you all a lesson about securing your info, it’s not like he knew that icq would make his info private to people looking to use it against him.
He should change his zip code or make it 9 digits then check to make sure it accepts the 9 digit zip code.
The ironic thing is that if you don’t put your actual birthday and zipcode on your id, and i know what your actual info is, i can get your name deactivated cause you are breaking the Yahoo! terms of service.
Gotta love Yahoo! LMAO
June 4, 2003 at 9:39 am #95606Celtic_coventina
MemberWell if yahoo wants my actual zipcode…they better make it harder for people to hack accounts. Lets say someone asks you for your birthday or Birthsign…innocent enough questions…so you tell them…big deal.
Then you maybe say the town your from…or for some reason share your addy info with a trusted person…who mentions your town online…they are more than halfway there…all they need is your answer to your secret question…and like you say that can be guessed with a little effort.
I think If I were to ever set up another account …I will pick my secret question and if I am using my dads name I will add to it… Instead just saying of Wilber (Not my dads real name) I will put daddywilber or fatherwilber Papawilber. For a pet named Rover….blackrover.. fluffyrover.. puppyrover..doggyrover…fatrover… something like that… wouldn’t that make it tons harder for a hacker to guess your secret answer? Just a thought.
June 4, 2003 at 1:36 pm #95603Oreo
MemberBack in the day when I got my first Yahoo! account you could make up your own secret question. I guess they stopped that b/c people were forgetting the answers. But it makes sense to have lots of different questions to vary the answers a little bit….and I don’t think any of my accounts for anything match completely.
June 4, 2003 at 7:14 pm #95609Johnson
MemberCeltic, like i said, the odds of your account being info cracked are a million to 1. It is a rare way for people to steal accounts, and out of all the people who try this method, only about 1% have any success with it. And as far as securing your answer, i would suggest using spaces, i wouldn’t suggest using spaces in your password, sometimes it can mess up the account. I would suggest making it Pet’s Name? and then making up an answer that doesn’t fit the question, like you could make your answer “big blue ball” when u try to answer it, the answer isn’t case sensitive, so if u made your answer DoG, dog would work.
Oreo, i have to disagree with you once again(imagine that). Yes a few years back you could personalize your secret question, as a cracker, i prefer personalized secret questions, cause people tend to make these easier to crack, i always knew for every 20 birthdays i cracked, at least one of the ids would have a gimmie secret question, e.g. “xxxx” was one secret question, and the answer was xxxx, no one else ever figured it out, but some people would make secret questions that were reminders to their pw, i had one id ? was “WHO ARE THE DEMONS?” an i knew it was referring to an aussie rules football team, but i could not guess the secret question, so eventually i tried DEMONS for the pw and it worked, i had some other ids that i got using the same method. Another thing against personalized ?’s is that they can make ?’s with limited answers, had one id, What is my fav color?, and i had more then one that were “What’s my fav restaurant?” Always liked the ones that narrowed it down, first one i ever guessed “What is G?” answer was gang, another one was “d
” i just went thru the dictionary lookin for 7 letter words that began with a d, til i got it.The best two secret questions to create are Pet’s name? and City of Birth?
June 4, 2003 at 7:22 pm #95600Jeff Hester
Keymasterthats gay whats wrong with yahoo and icq? dont they hav a privacy policy? gosh im soooo glad all my crap is fake! new internet lesson never trust anybody or thing
June 4, 2003 at 7:23 pm #95599Jeff Hester
Keymasterdoes this occur on aim msn and trillian too?
June 4, 2003 at 10:45 pm #95605Netti
MemberI’m curious… Where exactly does it say that if I don’t use my personal information, they can lock my account? I mean who’s to say the information I gave isn’t accurate? It just so happens, it’s not mine.
June 4, 2003 at 10:52 pm #95604Nhyrvana
MemberQuote:quote:The ironic thing is that if you don’t put your actual birthday and zipcode on your id, and i know what your actual info is, i can get your name deactivated cause you are breaking the Yahoo! terms of service.johnson false info…….
yahoo accepts your INITIAL zip or your updated zip for marketing purposes…. AND depending on the account age….. the terms of service accepted then is in effect until you modify the account and accept new…… so on a few of MY accounts…. i have a zip from 1998.. and it is accepted and legal.lets go one further…. just because i maybe nhyrvana on yahoo. does not mean i am nhyrvana on aim. * i AM NOT btw stop bugging her folks*
yahoo has to LEGALLY establish identity and ownership of said account. they wont listen to some snert from aol whining about a tos violation….
more likely yahoo will flag your ip and watch your activity on yahoo and eventually ban you.
June 4, 2003 at 10:58 pm #95602Jeff Hester
KeymasterQuote:quote:Originally posted by NettiI’m curious… Where exactly does it say that if I don’t use my personal information, they can lock my account? I mean who’s to say the information I gave isn’t accurate? It just so happens, it’s not mine.
Actually it’s here in their Terms of Service. It states:
Quote:quote:YOUR REGISTRATION OBLIGATIONS
In consideration of your use of the Service, you agree to: (a) provide true, accurate, current and complete information about yourself as prompted by the Service’s registration form (such information being the “Registration Data”) and (b) maintain and promptly update the Registration Data to keep it true, accurate, current and complete. If you provide any information that is untrue, inaccurate, not current or incomplete, or Yahoo! has reasonable grounds to suspect that such information is untrue, inaccurate, not current or incomplete, Yahoo! has the right to suspend or terminate your account and refuse any and all current or future use of the Service (or any portion thereof)…This is a typical CYA clause; legaleze designed to protect them, but rarely enforced. In fact, I bet that if the truth were known, the number of accounts with 100% accurate information provided are a very small percentage of the total accounts out there.
I don’t know what they’d do if they found out that I’m actually 81, not 41. :p
June 4, 2003 at 11:28 pm #95608Johnson
MemberQuote:quote:Originally posted by NhyrvanaQuote:quote:The ironic thing is that if you don’t put your actual birthday and zipcode on your id, and i know what your actual info is, i can get your name deactivated cause you are breaking the Yahoo! terms of service.johnson false info…….
yahoo accepts your INITIAL zip or your updated zip for marketing purposes…. AND depending on the account age….. the terms of service accepted then is in effect until you modify the account and accept new…… so on a few of MY accounts…. i have a zip from 1998.. and it is accepted and legal.Ok, if you people wanna argue on here we can, first off, having a different zip then what u signed up with is totally understandable and i’m sure yahoo wouldn’t deactivate a name based on that alone, let’s say someone has a bogus bday on their account, hmm like in the 1800’s i would bet a lot of money i could get the name deactivated, if theres any ? about an account yahoo will ask you to fax them a photo of your drivers liscense. Even b4 that they would ask you to give them the birthday u put on your name when u signed up, and used to there was ways to look up birthdays on ids thru pay direct, but that is patched, theres a couple other ways, dunno if they patched them or not, not many people knew about em. Even if i couldn’t get a name deactivated from havin questionable info theres a dozen different ways to get ids deactivated, we been having deactivating wars in games for months now. The way i look at it one way or another everyone has violated tos.
June 4, 2003 at 11:48 pm #95601Jeff Hester
KeymasterQuote:quote:Originally posted by Johnson…The way i look at it one way or another everyone has violated tos.
Most likely very true. Remember that the TOS aren’t really there to help you, they aren’t even there to protect you from others. The TOS are there to protect Yahoo, Inc. from lawsuits. If someone “breaks” the TOS, then Yahoo is not responsible. Since we all promised to abide by them when we opened our Yahoo accounts, we become responsible for the data within, not Yahoo. That’s the Cover-Your-Ass clause.
June 7, 2003 at 4:05 pm #95607coolguyj2
Memberwell i agree with Jeff, TOS is to protect Y! from lawsuit but what abt us!!! our privacy is easily no longer private!! cmon! gimme a brk!!!
-
AuthorPosts
- You must be logged in to reply to this topic.