Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: hotmail security

0 views
Skip to first unread message

N. Miller

unread,
Jan 18, 2005, 3:23:42 PM1/18/05
to
In article <D7BFB774-9DF5-46A4...@microsoft.com>, =?Utf-8?B?
SmVubmlmZXI=?= says...

> Is it possible for microsoft to tell me if someone has been logging into my
> hotmail account?

Probably. The question is, will they, even if you can find the correct point
of contact. You probably don't pay enough for them to respond.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Bigbruva

unread,
Jan 18, 2005, 5:05:00 PM1/18/05
to
Your best bet Jennifer is to change your password and secret question ASAP
and keep it secure.
You will have little help from Hotmail as this is a free service the support
is pretty basic.
Make sure the password is long and contains symbols and numbers to make it
hard to guess.

Good luck

BB

"Jennifer" <Jenn...@discussions.microsoft.com> wrote in message
news:D7BFB774-9DF5-46A4...@microsoft.com...

N. Miller

unread,
Jan 20, 2005, 3:10:29 PM1/20/05
to
In article <OIigWKj$EHA....@TK2MSFTNGP10.phx.gbl>, says...

> Since whoever would be doing so would be using your ID and Password there is
> no practical way to tell them apart from you. So yes they can tell someone
> is logging in,...there is no way to tell that it isn't just you.

I wonder; if they log the sign in, wouldn't they log the IP address that the
sign in originated from? Anybody signing in to MSN Hotmail as me better show
the exact same IP address that my router logs show for a given date and
time...but that kind of detail is not likely to be available after some
period of time; and it is not likely that anybody at MSN would make the
effort to search the logs for just anybody. LEAs with warrants, perhaps, but
not casual users of the service; free, or paid.

Vanguard

unread,
Jan 20, 2005, 9:26:44 PM1/20/05
to
"Jennifer" <Jenn...@discussions.microsoft.com> wrote in message
news:D7BFB774-9DF5-46A4...@microsoft.com...
> Is it possible for microsoft to tell me if someone has been logging
> into my
> hotmail account?


If you know of recipients that are getting bogus e-mails purporting to
be from you because a hacker got into your Hotmail account, check the
X-Originating-IP address in the headers. That will identify the IP
address of the sender who was connected to Hotmail at the time the
message was composed and sent.

Of course, do you really want to leave your account open to the hacker
*if* you can still manage to login to your account? I would think you
would simply change the password (use a STRONG password this time) and
the secret question and personal info so they can't break in again. If
they hacked into your Hotmail account and you can no longer get in, and
especially if it is a freebie account, then you no longer own that
Hotmail account. They do. Open a new Hotmail account and use a STRONG
password this time.

--
_____________________________________________________________
Post your replies to the newsgroup. Share with others.
For e-mail: Remove "NIXTHIS" and append "#VS811" to Subject.
_____________________________________________________________

Vanguard

unread,
Jan 21, 2005, 11:37:33 AM1/21/05
to
"Phillip Windell" <@.> wrote in message
news:O8aBVo8$EHA....@TK2MSFTNGP15.phx.gbl...
>
> "Vanguard" <vanguard...@yahooNIXTHIS.com> wrote in message
> news:O3wrnC2$EHA....@TK2MSFTNGP09.phx.gbl...

>> If you know of recipients that are getting bogus e-mails purporting
>> to
>> be from you because a hacker got into your Hotmail account, check the
>> X-Originating-IP address in the headers. That will identify the IP
>> address of the sender who was connected to Hotmail at the time the
>> message was composed and sent.
>
> I could do that to someone myself and I would never have to connect
> any
> Hotmail account. All I need is the email address,...I wouldn't have to
> hack
> into anything and would never need their ID or Password.
>
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>


You adding your own bogus X-Originating-IP header still won't obviate
the mail server from adding its own X-Originating-IP header (which would
either overwrite yours or prepend theirs because your header is part of
the *data* sent during the DATA command and *not* what the mail server
adds itself over which you have no control). Spammers also try stupidly
to add bogus Received headers in an attempt to confuse the source of the
e-mail. Doesn't work because they still have no control over the
Received headers added by the mail server. If you operate your own SMTP
mail server, and if your ISP stupidly permits your SMTP traffic to
traverse their domain rather than requiring you target their mail
servers then, yes, you could bogify the headers because it is your mail
server that you have bastardized. But the receiving mail server still
knows who connected to it and reports that IP address so you will still
get detected. You could use an open relay proxy to funnel through your
bogified message but that open relay's IP address would still be known
to the receiving mail server and it is likely to already have been
blacklist by the public DNSBLs or the receiving ISP themself.

Vanguard

unread,
Jan 21, 2005, 11:42:05 AM1/21/05
to
"Phillip Windell" <@.> wrote in message
news:O8aBVo8$EHA....@TK2MSFTNGP15.phx.gbl...
>
> "Vanguard" <vanguard...@yahooNIXTHIS.com> wrote in message
> news:O3wrnC2$EHA....@TK2MSFTNGP09.phx.gbl...
>> If you know of recipients that are getting bogus e-mails purporting
>> to
>> be from you because a hacker got into your Hotmail account, check the
>> X-Originating-IP address in the headers. That will identify the IP
>> address of the sender who was connected to Hotmail at the time the
>> message was composed and sent.
>
> I could do that to someone myself and I would never have to connect
> any
> Hotmail account. All I need is the email address,...I wouldn't have to
> hack
> into anything and would never need their ID or Password.


Then you haven't hacked the Hotmail account which is what the OP asked
about. I can send as you, as the OP, or whomever and even use
anonymizing proxies to hide the originating domain and yet NONE of that
addresses the issue of hijacking the Hotmail account itself.

Unknown

unread,
Jan 30, 2005, 5:55:05 PM1/30/05
to

BAJI

unread,
Jul 18, 2005, 11:52:43 AM7/18/05
to
HOW CAN SOMEONE WHOSE E-MAL HAS BEEN HACKED GET IT ABCK, WHEN EVERY THING
FROM PASSWORD TO SECRET QUESTION IS CHANGED.
0 new messages