Securest Webmail Service?

Richrox75 · 19 Aug 2008 at 15:57

Hi all,

As you may know from a previous posts my hotmail/msn has been compromised. The person doing it has now changed my password so I know longer have access. I have no idea how this has been done.

What is the most secure webmail service to use? I dont want to set up another MSN account for the same thing to happen.

Also is there any way this person can be snooping on what I am doing through mu IP address?

Thanks for any assistance and advice.

Rich

bledd · 19 Aug 2008 at 16:23

gmail.com

^the best

either you had spyware on your pc
or..
you had a daft secret question, like "which football team do i support" 'manchester united', DING

Richrox75 · 19 Aug 2008 at 16:28

Thanks bledd,

Must be spyware then as I firmed up all of the passwords and secret questions.

So next question.....

How do I identify the key logger or spyware on my pc? I have Symantec Antivirus as standard as this is a work laptop and have run the full update and scan.

bledd · 19 Aug 2008 at 16:30

i guess you have to keep that on because it's a work one?

install spybot s&d, do a full update and run the immunize, and full scan from it

http://www.safer-networking.org/en/mirrors/index.html

Bane · 19 Aug 2008 at 18:25

As it's a works notepad, the I.T. department might have a recovery disk for it. That would be the best route if they wipe the hard disk and reinstall OS image. Unless you suspect it was one of them that install a key logger originally.

Beansprout · 19 Aug 2008 at 18:31

Funny you should ask this, the following came up on Slashdot earlier today:

"A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers' conference in Las Vegas. Last week, Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, not just authentication. Users who did not turn it on now have a serious reason to do so, as Mike Perry, the reverse engineer from San Francisco who developed the tool, is planning to release it in two weeks."

http://www.hungry-hackers.com/2008/08/gmail-account-hacking-tool.html
Interesting stuff

sibeer · 20 Aug 2008 at 08:12

Beansprout said:
Funny you should ask this, the following came up on Slashdot earlier today:

http://www.hungry-hackers.com/2008/08/gmail-account-hacking-tool.html
Interesting stuff

Why would someone release a hacking tool on the world that he has openly admitted to designing. What a scum bag :rolleyes:

Mr.Clark · 20 Aug 2008 at 08:34

Of course, the thing about Gmail is that you can turn on SSL permanently.

You can't with hotmail. You get an SSL login, then redirected to a non-secure site for the actual webmail.

If your work laptop has something nasty on it, take it back to your IT department. It's their job to fix it for one thing, and they probably don't want you going all gung-ho and installing more stuff on it anyway.