Slashdot Mirror
Hackers Could Read Your Hotmail, MSN, and Outlook Emails by Abusing Microsoft Support (vice.com)
eatmorekix writes: On Saturday, Microsoft confirmed that some users of the company's email service had been targeted by hackers. A hacker or group of hackers had first broken into a customer support account for Microsoft, and then used that to gain access to information related to customers' email accounts such as the subject lines of their emails and who they've communicated with. But the issue is much worse than previously reported, with the hackers able to access email content from a large number of Outlook, MSN, and Hotmail email accounts, according to a source who witnessed the attack in action and described it before Microsoft's statement, as well as screenshots provided to Motherboard. Microsoft confirmed to Motherboard that hackers gained access to the content of some customers' emails.
Another headline that promises sensationalist clickbait bullshit and little else.
How about some real articles, slashdot edito.... n'mind.
I've been trying to get back into my old hotmail address (really just out of curiosity at this point) for years now. I had a hotmail address back in the stone age of the service (before Microsoft had even bee rumored to be interested in buying it) and then I walked away from it. However the address still exists (emails can go there, and Microsoft won't let anyone sign up with it as a new address) but the password recovery / password reset tool doesn't work for it. If I try to reset the password I end up stuck in a loop of "your username does not exist" "please reset the password for your username" that never gets anywhere.
Of course, an email address that is easily over 20 years old - that hasn't had any meaningful email sent to it in well over 15 years - is not of great value. I searched online for it and found a couple really old forum posts I put up back then where I referenced it but nothing else mentioning it. Being as it was named for a minor character in a video game that most people have forgotten about, it isn't a name in high demand.
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
Microsoft is a partner of the NSA. Microsoft does NOT have fundamental exploits in Windows by 'accident' or 'incompetence' as this warmongering neoliberal outlet suggests.
Take a history FACT about MS. It's early document/helpfile fileformat. This fileformat- understood to be for read only books, allowed, by design, execution of embedded code. So bad was this exploit, the format was utterly depreciated on any network system when the NSA functionality became generally known.
Indeed a fav trick of the NSA is having code embedded in all kinds of file-formats where no-one would expect code function. This included .PDF and many early image formats.
Today the coders working for the NSA at Google, Apple, and Microsoft (with the explicit permission of the controllers of these companies) use better tricks- usually hiding the exploits in the OS itself. Today Intel's NSA sponsored IME, an embedded tiny computer running MINIX in every Intel CPU sold (outside the US gov), combined with a low speed wireless interface on ALL Intel motherboards (unless the computer is in a Faraday cage) makes external exploits crude by comparison.
Every Intel PC that is on at least stand-by power can be silently connected to by an NSA agent within a certain number of meters (maybe hundreds), and the unstobbable MINIX OS (that operates wholly within the CPU) can power up and read/write to connected interal storage. NO- your PC does not need to have a wireless chip that you know about. This aerial is on the chip itself- the only downside is that the wireless connection is much slower than any standard wireless connection.
Anyhoo, this MHT attack vector mentioned in the OA is an old school NSA trick.
PS MS only patches out exploits when the j-ish criminals in izrael who learn of the exploits from their j-ish mates in the NSA pass on knowledge of the exploits to their j-ish mates in Ukraine, where the majority of cybercrime is masterminded.
NSA exploits make PCs buggy and massively power inefficient. Yet the dribbling neoliberal supporters of the NSA, like Slashdot, claim to their idiot readers to be 'green'. How neoliberals play their sheeple supporters.
"NSA exploits make PCs buggy and massively power inefficient." - Citation required.
"Indeed a fav trick of the NSA is having code embedded in all kinds of file-formats where no-one would expect code function. This included .PDF and many early image formats." - You're saying there's infected pdf's? Oh my!
" and the unstobbable MINIX OS " - Unstobbable? Reaaaaaaallllllly?!
Sounds nice after all the abuse and indifferent service I've gotten from them over the years.
Mimetics Inc. Twitter
That could be considered to be Microsoft support!!!
Are they calling Microsoft support and calling them ugly and fat and demanding that they perform sexual acts on themselves? And then laughing when the support person starts crying?
Why should anyone at MS have access to your hotmail account in the first place, let alone at customer support?
SOMEONE should read them, and it’s NOT gonna be me, so...
Our reign has gone on long enough. Indeed. Summon the meteors.
You're confused. Kendall is a sodomite, not a semite.
Microsoft almost makes you get a email account anymore so you can sign in to other Microsoft services, Office 365, XBox, etc. Microsoft not the only ones as Apple does with Apple ID, and Google does with its own Google account. Yes, way more simpler for the end user, way more exposed then it should be.
Fuck Off APK
Hacking people over the phone is a lot easier than it should be. Every time I call an ISP for one of my clients, they ask me my name. then, "Oh sorry sir, your name is not in our records. I'd need to speak with the person listed as their manager. Then I just ask if the manager's name is whoever the manager really is. They tell me yes. Then I put them on the phone (I hand them the phone that's got the ISP on it already). The manager tells the ISP, "Yes, put BringsApples on the list of admins." Then I'm an admin. But I always wonder wtf this illusion of security means for all of the real people out there.
Politics; n. : A religion whereby man is god.
I can read your slashdot posts!
Then if you get your email accounts hacked over the phone then you probably get what you deserve.
What's 'antisemitic' about FACTS? The jew have been kicked from ~dozen nations over time: WHY IS THAT? Explain that (going to tell me the nations were all "nazis"?).
* Dearest JEW, please tell us more, ok??
(See subject & last 2x times I posted this question YOU TRIED DOWNMOD HIDING IT, lol as proof thereof of MY SHUTTING YOUR DULL-WITTED ASS DOWN easily https://it.slashdot.org/commen... & https://it.slashdot.org/commen... as YOU were unable to answer that to counter it's fact... )
APK
P.S.=> This ought to be good - it already IS, you're SPEECHLESS & trying to HIDE what you can't beat - fact... apk
Security pros, results & /. registered users disagree w/ you troll: So EAT YOUR WORDS vs. https://yro.slashdot.org/comme... you CHUMP!
* Stooge - tell us: HOW DOES EATING YOUR WORDS TASTE?
(A bit like your FOOT in your MOUTH ramming those lies of yours BACK DOWN your PENCIL CHICKEN-NECK throat, WASHED DOWN by the BITTER taste of YOUR SELF-defeat, perhaps? RoTfLmAo @ U - Yes!)
APK
P.S.=> See subject: Hohohoho I see you don't LIKE how YOUR WORDS TASTE now that you had to EAT THEM hahaha - you TRIED to DOWNMOD HIDE this last 2x I posted it https://it.slashdot.org/commen... & + https://it.slashdot.org/commen... CLUE: I won't LET you, I won't allow it & I CRUSH YOU with it - EASILY! Lmao ... apk
Who reads your email to sell you ads as a "convenience" to you.
Now that anonymous hacker's story about hacking my email is shown to be at least partially true due to Microsoft's negligence, will Microsoft be paying into his bitcoin account to keep my private videos safe, or do I have to wait until they disclose the vulnerability in Internet Explorer that lets hackers access my webcam even if I use other browsers to view porn sites?
Every admin reads email. Which BOFH doesn't have that t-shirt?
Use GPG or host your own with TLS. And even then, the other party must admin their own email with TLS, then you need Dnssec and other measures to prevent downgrade attacks.
Only safe way is encryption. And self hosting when you can't. And don't send anything important over email.
I'm all for abusing Microsoft Support, but stealing passwords is another matter!