Your Ebay account or Hotmail have ***NOT*** been hacked. Either you have got something from a dodgy site or someone has guessed your password or secret question. There is no other alternative here. One or the other HAS happened.
Hotmail Account Hacked
- Thread starter Converge
- Start date
No, but have done it to my mates.
Guessed the secret question his hotmail has been in japanese since he was 14!
Did a similar thing with my ex's account....
I just don't understand how someone who has never met me or anything like that has guessed it 
It's a rather unusual and complicated password...
I sitll haven't heard anything from Microsoft about recovering the account for me, which seems a bit poor
It's a rather unusual and complicated password...
I sitll haven't heard anything from Microsoft about recovering the account for me, which seems a bit poor
I dunno... ebay seems to have security breaches and account hijacks all the time.
Unless they're ALL due to keylogger activity :/
Yep they sure do. I don't ever open emails from eBay either. I haven't touched that site for ages, yet it still happened to me.
Brute force would not work. Every time you tried a new password it would take ~5 seconds for the server to try to validate the password and the website would automatically block the ip address due to suspected ddos after so long. At one password every 5 seconds, it's going to take a few billion years to crack it.
Associate
- Joined
- 6 Nov 2002
- Posts
- 1,197
There have been several articles in the past year about a number of possible ebay hacks. Each time one appears ebay deny it and say that nobody breached their systems.
Since February there has been a massive rise in "hijacked" accounts.
http://redtape.msnbc.com/2007/03/how_far_has_vla.html
That is a link to one of the articles.
brute force is so unlikely its not even worth thinking about, most smart websites would temp block a person from attempting to log in after x number of failed log in attempts, that + the time it takes to process each login attempt would mean a brute force attempt to log in to an account, while possible, is nowhere near practicle.
also, while brute forcing the password may be not very practicle, it would be easier to brute force the forgot password question, due to the questions being like 'dogs name' or 'mothers maiden name' etc... which is much more likely to be a word in a dictionary or a simple name, unlike a password which could have numbers/letters/capital letters/symbols.
also, while brute forcing the password may be not very practicle, it would be easier to brute force the forgot password question, due to the questions being like 'dogs name' or 'mothers maiden name' etc... which is much more likely to be a word in a dictionary or a simple name, unlike a password which could have numbers/letters/capital letters/symbols.
Rainbow tables quite quickly extract a password from a hash though.
Brute force? I doubt it, I tried hacking my own windows password with brute froce: Said eta was 212 years or something
.
Rainbowcrack did it in a few seconds on the other hand.
Brute force? I doubt it, I tried hacking my own windows password with brute froce: Said eta was 212 years or something
.Rainbowcrack did it in a few seconds on the other hand.
It's what im saying, i've not been careless, i honestly think someone's used some software or another to gain access. The chances of someone coming across my email address and then thinking, "oh i think his password is this" and getting it in one, are pretty darn slim to be fair. It has to be linked with my eBay account being hacked, it just has to be.
Still haven't heard anything from Microsoft/Hotmail about my account, i wish there was some kind of decent support number you could ring, or an online chat (like eBay) that you could use.
Still haven't heard anything from Microsoft/Hotmail about my account, i wish there was some kind of decent support number you could ring, or an online chat (like eBay) that you could use.
Last edited:
It's very easy to protect against those attacks. So again, not feasible.
i have a professional network management tool (@stake LC5) that can brute force a windows password in about 6 hours, depending on CPU speed.Rainbow tables quite quickly extract a password from a hash though.
Brute force? I doubt it, I tried hacking my own windows password with brute froce: Said eta was 212 years or something
Rainbowcrack did it in a few seconds on the other hand.
I once had my hotmail/msn accounts frozen by some ********on a forum. He had a program that just froze/disabled them, i tried to access them over a few days and it constantly said they had been disabled because someone had entered incorrect details when trying to log in to them. Because the account was 6/7 years old i didn't rememeber the secret answer. I had to speak to someone else on the forum who got the guy to release my account. The guy who froze them then emailed me and said he could have left them frozen permanetly, and that i was lucky.
NO SWEARING - Dangerous
NO SWEARING - Dangerous
Did he just enter the wrong details 5 times or what ever it is?
All this talk of hackers and programs blah blah we all know the op just got caught out by user error. I don't have anything against you mate it happens to a lot of people, its just the "i got hacked" story gets old. Good luck with getting your account sorted soon.
All i do is access my email through MSN, i honestly can't see the user error, im not being stubborn, i'd freely admit if i'd done something obvious, but i am honestly stumped. I haven't used my eBay account in months, yet the person hacks my eBay account and then my hotmail account goes haywire... coincidence? no.
I'm determined to somehow prove that it wasn't me in the wrong here.
I'm determined to somehow prove that it wasn't me in the wrong here.
No, because he released it straight away when another guy asked him to. It was locked for 5 days. He said his program messed around with their servers.
He did tell me the name of it, but it might be against rules to post it as it could be a virus/trojan.
Last edited:
You can't mess around with their servers. They're too secure. A bot/macro will lock out the hotmail account for 15mins or so by entering incorrect details. After he stops entering the details, the account will automatically unlock after 15mins.
Last edited: