4 ms·

I'd disagree, I think is an excellent example of people who think they don't need to worry about security because they aren't on the Internet very much. It was

I'd disagree, I think is an excellent example of people who think they don't need to worry about security because they aren't on the Internet very much. It was all pretty mundane I agree, right up until they had her power of attorney and social security number. This should be a wake up call to the have-nots: You aren't safe just because you don't post on Facebook and you don't use the computer. Just because you don't drive doesn't mean you can't be hit by a car.

downandout 11y ago
>It was all pretty mundane I agree, right up until they had her power of attorney and social security number. They only got these after she let them into her house and gave them physical access to her computer. Of course it's only common sense that anyone that is allowed into your home and onto your computer can "pwn" you and worse - hacker or not. That's why 99.9% of people, including this woman, wouldn't allow strangers into their home and give them unfettered physical access to their computer. The article title implies that they were able to "pwn" her through "hacking". The only mildly interesting they did in this regard was the spear-phishing attack based on her Facebook likes.
- FussyZeus 11y ago
  As I read it, they got that information from her email, and were I a betting man I'd say probably Yahoo or Gmail. They already had her password; getting it from the website would be trivial. This is all my own assumption of course. The underscore here is that a limited use case person, someone who occasionally posts limited things and doesn't do anything beyond casual ebaying can still be a victim.
  - downandout 11y ago
    Yes, they got it from email, but they didn't get into the email until they were in the house and got the password from a post-it note for the main account, and the daughter had the browser auto-fill it. They wouldn't have had either of these without a willing participant that let them into the house to find the information. It's like saying "I was easily able to rob the bank vault after the manager opened it".
    - FussyZeus 11y ago
      You make it sound like achieving remote access to this machine with two dozen malicious programs on it would be difficult. I highly doubt the machine is as hardened as her Facebook is. The chain is only as strong as it's weakest link.
j4kp07 11y ago
That is a false equivalence though. There is no phenomenon of hackers breaking into people's homes via garage doors openers in hopes to find passwords written on post-it notes. If I break into your home, I'm not looking for post-it notes. I'm looking for small yet valuable objects that are easily pawned. If I have a vendata against you, I can break into your home and setup keyloggers, hidden video/audio recorders that "call home" or even allow me to "dial in" and listen in. I don't need your stinking post-it notes and I won't even have to be in a rush. (http://www.amazon.com/dp/B00CIXAF8O/ref=wl_it_dp_o_pC_S_ttl?_encoding=UTF8&colid=7NGBE1T8LAGR&coliid=IVRO6DTKRE52M http://www.amazon.com/dp/B00CIXAF8O/ref=wl_it_dp_o_pC_S_ttl?...) The only thing this pawnage verified for me is that there are a lot of people with malware running on their computers and these same people are susceptible to phishing scams.

downandout 11y ago

>It was all pretty mundane I agree, right up until they had her power of attorney and social security number. They only got these after she let them into her house and gave them physical access to her computer. Of course it's only common sense that anyone that is allowed into your home and onto your computer can "pwn" you and worse - hacker or not. That's why 99.9% of people, including this woman, wouldn't allow strangers into their home and give them unfettered physical access to their computer. The article title implies that they were able to "pwn" her through "hacking". The only mildly interesting they did in this regard was the spear-phishing attack based on her Facebook likes.

FussyZeus 11y ago
As I read it, they got that information from her email, and were I a betting man I'd say probably Yahoo or Gmail. They already had her password; getting it from the website would be trivial. This is all my own assumption of course. The underscore here is that a limited use case person, someone who occasionally posts limited things and doesn't do anything beyond casual ebaying can still be a victim.
- downandout 11y ago
  Yes, they got it from email, but they didn't get into the email until they were in the house and got the password from a post-it note for the main account, and the daughter had the browser auto-fill it. They wouldn't have had either of these without a willing participant that let them into the house to find the information. It's like saying "I was easily able to rob the bank vault after the manager opened it".
  - FussyZeus 11y ago
    You make it sound like achieving remote access to this machine with two dozen malicious programs on it would be difficult. I highly doubt the machine is as hardened as her Facebook is. The chain is only as strong as it's weakest link.

j4kp07 11y ago

That is a false equivalence though. There is no phenomenon of hackers breaking into people's homes via garage doors openers in hopes to find passwords written on post-it notes. If I break into your home, I'm not looking for post-it notes. I'm looking for small yet valuable objects that are easily pawned. If I have a vendata against you, I can break into your home and setup keyloggers, hidden video/audio recorders that "call home" or even allow me to "dial in" and listen in. I don't need your stinking post-it notes and I won't even have to be in a rush. (http://www.amazon.com/dp/B00CIXAF8O/ref=wl_it_dp_o_pC_S_ttl?_encoding=UTF8&colid=7NGBE1T8LAGR&coliid=IVRO6DTKRE52M http://www.amazon.com/dp/B00CIXAF8O/ref=wl_it_dp_o_pC_S_ttl?...) The only thing this pawnage verified for me is that there are a lot of people with malware running on their computers and these same people are susceptible to phishing scams.