3 ms·

I had someone try that on me about a year ago (shortened as it was a _long_ email): > You probably noticed your device is acting strangely lately. That's becau

I had someone try that on me about a year ago (shortened as it was a _long_ email): > You probably noticed your device is acting strangely lately. That's because you downloaded a nasty software I created while you were browsing the Ƿornographic website...[...] If you do not do what I ask you now, I will upload this ugly video file with you ... and the stuff you were watching to several video upload sites and I will send the links to all your friends, family members and associates.[...] I think 2,000 USD is a fair price for my silence. I know you can handle to send me this money - and it is enough for me to get lost. So how do you send the cash?? Bitcoin.[...] > Ok.. so what if you decide not to pay ? Well if you want to test my patience - go on. I will destroy your social life, you can count on that. You think that visiting Police is a good idea ? Nope. I don't live in your country and I know how to stay Anonymous. I will send the compromising video to everyone you know! Just send me the 2,000 USD and we forget about the whole thing. I have family to feed too.[...] > The time starts ticking after you open this letter (I included a pixel in this message and I will know when you read it). Oddly enough, nothing ever happened.

nitrogen 6y ago
I imagine it was an automated spam that went to many many emails from e.g. the old Myspace or LinkedIn dumps.
djxfade 6y ago
I received the exact same template mail. They had also included an old password that I presume was leaked in the Adobe hack or something. Didn't really feel worried though, cause on my device (a MacBook Pro with the T2 security chip), it's physically impossible to enable the webcam without the status LED getting activated.
- culturestate 6y ago
  > it's physically impossible to enable the webcam without the status LED getting activated People put way too much trust in webcam LEDs. Not because they don't work or could be bypassed, but because it's super easy to just not notice it if it only comes on for a split second. It doesn't take much time to grab a single frame; maybe you've been staring...intently...at the screen and get tunnel vision, or you just look away, or whatever. Even if the LED was forced to light up for half a second before and after the camera became active as a sort of safety interlock, what's the average user gonna do with that information if it's unexpected? Panic and close the lid? I'm not super paranoid about this but I'm just paranoid enough that I use Oversight[1] and manually approve whichever app is asking for access at the time. You can do this halfway natively in Catalina, but as far as I know it's binary - either the app has access or it doesn't, you can't set it to ask each time. 1. https://objective-see.com/products/oversight.html https://objective-see.com/products/oversight.html
renewiltord 6y ago
Gmail and some other guys proxy images too so tracking pixels won't work.
moonchild 6y ago
I heard this story once: > ooooohhhhh... i got a sextortion email > 'm a hacker who cracked your email and device a few months ago. > "Through your email, I uploaded malicious code to your Operation System." > (somehow i doubt that) > "So, when you had fun on piquant sites (you know what I mean!) > I made screenshot with using my program from your camera" > piquant? bitch, please, the porn sites i visit a more hard-core than piquant.

nitrogen 6y ago

I imagine it was an automated spam that went to many many emails from e.g. the old Myspace or LinkedIn dumps.

djxfade 6y ago

I received the exact same template mail. They had also included an old password that I presume was leaked in the Adobe hack or something. Didn't really feel worried though, cause on my device (a MacBook Pro with the T2 security chip), it's physically impossible to enable the webcam without the status LED getting activated.

culturestate 6y ago
> it's physically impossible to enable the webcam without the status LED getting activated People put way too much trust in webcam LEDs. Not because they don't work or could be bypassed, but because it's super easy to just not notice it if it only comes on for a split second. It doesn't take much time to grab a single frame; maybe you've been staring...intently...at the screen and get tunnel vision, or you just look away, or whatever. Even if the LED was forced to light up for half a second before and after the camera became active as a sort of safety interlock, what's the average user gonna do with that information if it's unexpected? Panic and close the lid? I'm not super paranoid about this but I'm just paranoid enough that I use Oversight[1] and manually approve whichever app is asking for access at the time. You can do this halfway natively in Catalina, but as far as I know it's binary - either the app has access or it doesn't, you can't set it to ask each time. 1. https://objective-see.com/products/oversight.html https://objective-see.com/products/oversight.html

renewiltord 6y ago

Gmail and some other guys proxy images too so tracking pixels won't work.

moonchild 6y ago

I heard this story once: > ooooohhhhh... i got a sextortion email > 'm a hacker who cracked your email and device a few months ago. > "Through your email, I uploaded malicious code to your Operation System." > (somehow i doubt that) > "So, when you had fun on piquant sites (you know what I mean!) > I made screenshot with using my program from your camera" > piquant? bitch, please, the porn sites i visit a more hard-core than piquant.