Serious--friend's Yahoo! account cracked

[ndogg]

Are any of you familiar with how Yahoo!'s mail service? One of my friends accounts just got cracked and used her account to send people, including her friends and family, really vulgar messages. I would like to know if any of you know how to get Yahoo! to release their logs for her account or something. I'm not all that familiar with Yahoo! so I couldn't help her.

------------------
Too much Sun can give you cancer. Windows break too easily.
Apples/Macintoshes can rot. BSD... sounds too much like LSD.
Penguins are the only animals sophisticated enough to wear a
tuxedo.


Linux, the only one with the Penguin.


http://ndogg.n3.net

[mowman]

Sorry to hear 'bout your friend...but I wonder how this particular case happened? I used to use Yahoo! mail but I found later that it is real easy to get back inside the accounts of those who did not login/logoff properly...especially on public computers. I'm at a university where it is highly possible to some how go right back into ppls account, but in secure mode, one goes through SSL.

I'm not sure if this happens anymore, but did you try contact Yahoo support...I'm sure they could help out, although I would be somewhat skeptical about them giving out log material.

Hope this helped some.

[ndogg]

If you request it for your account, they have to since it's in their policy, I just don't know how to go about doing that.

------------------
Too much Sun can give you cancer. Windows break too easily.
Apples/Macintoshes can rot. BSD... sounds too much like LSD.
Penguins are the only animals sophisticated enough to wear a
tuxedo.


Linux, the only one with the Penguin.


http://ndogg.n3.net

[Strike]

Just because someone's name is on the "From:" e-mail address doesn't mean it came from them or even their account. E-mail spoofing is not that hard. You just have to find a mail-server that will do certain things for you. There's no assurance of integrity built into e-mail - you specify your own "From:" address and "Reply-to:" address. So, if you want to do something like what happened to your friend, then all you have to do is say you are him/her and send some e-mails with his/her e-mail address in the aforementioned fields. You can sometimes track down where the mail came from if you just look in the headers and see where the message was received from. Follow that trail back to the originating server and you've got it.

[Shad]

While strike is right, it is also fairly easy to acces most web based e-mail on a public computer, particularly if the person does not log out or take other security precautions. If this happened, about the only way to prove your friend did not do this is to have an alibi for the time the logs show whent he email was sent.

If the terms of service from yahoo state that it will provide the logs, then it should also state how to request them.

------------------
Just a Tuna in the Sea of Life