14 ms·

Ashamed to admit but I used to "hack" my classmates (girls) hotmail accounts like that when I was young. I tried to recover their password and if I didn't know

Ashamed to admit but I used to "hack" my classmates (girls) hotmail accounts like that when I was young. I tried to recover their password and if I didn't know the answer to their security question (I often did) I just asked... I was curious if they write something about me in their emails, never did...

lucb1e 14y ago
Simply brilliant. You should submit this together with a security issue report to Facebook and Hotmail and whoever else uses security questions. Do you mind if I quote you (with link) on my blog?
- angry-hacker 14y ago
  Go ahead... hotmail by the way still let's you take over someones account by only knowing email address and answer to security question which is often maiden middle name, name of first pet, best childhood friend etc... you can find that information freely from facebook for an example. Or just ask :)
  - Terretta 14y ago
    Forward all your "friends" one of those "50 Things You Didn't Know About Me: Fill In Your Answers and Forward!" question lists that includes the security questions you're targeting.
- elithrar 14y ago
  > You should submit this together with a security issue report to Facebook and Hotmail and whoever else uses security questions. Google, too. I suggest you run through the recovery process yourself (on a dummy account, or your own) to see the kinds of questions asked. Questions like "when did you last access the account?" are easily answered; as is "name 5 regular contacts"; and so on. I could (but would not) perform the recovery process (and gain access to) acquaintances accounts, given how simple the questions are. The key is just knowing "enough" in aggregate to pass their bar.
- icebraining 14y ago
  It's also how Kernell "hacked" Sarah Palin's email account: http://en.wikipedia.org/wiki/Sarah_Palin_email_hack http://en.wikipedia.org/wiki/Sarah_Palin_email_hack
jebblue 14y ago
I could be wrong but I think you're admitting to a felony or multiple felonies.
- deleted 14y ago
  [deleted]
- nitrogen 14y ago
  Part of the problem is thinking that laws are an effective solution.
- DrJokepu 14y ago
  Depending on the jurisdiction, it's entirely possible that a statute of limitations makes this irrelevant (in a legal sense). Obviously you still don't want future employers etc. to find this post.

lucb1e 14y ago

Simply brilliant. You should submit this together with a security issue report to Facebook and Hotmail and whoever else uses security questions. Do you mind if I quote you (with link) on my blog?

angry-hacker 14y ago
Go ahead... hotmail by the way still let's you take over someones account by only knowing email address and answer to security question which is often maiden middle name, name of first pet, best childhood friend etc... you can find that information freely from facebook for an example. Or just ask :)
- Terretta 14y ago
  Forward all your "friends" one of those "50 Things You Didn't Know About Me: Fill In Your Answers and Forward!" question lists that includes the security questions you're targeting.
elithrar 14y ago
> You should submit this together with a security issue report to Facebook and Hotmail and whoever else uses security questions. Google, too. I suggest you run through the recovery process yourself (on a dummy account, or your own) to see the kinds of questions asked. Questions like "when did you last access the account?" are easily answered; as is "name 5 regular contacts"; and so on. I could (but would not) perform the recovery process (and gain access to) acquaintances accounts, given how simple the questions are. The key is just knowing "enough" in aggregate to pass their bar.
icebraining 14y ago
It's also how Kernell "hacked" Sarah Palin's email account: http://en.wikipedia.org/wiki/Sarah_Palin_email_hack http://en.wikipedia.org/wiki/Sarah_Palin_email_hack

jebblue 14y ago

I could be wrong but I think you're admitting to a felony or multiple felonies.

deleted 14y ago
[deleted]
nitrogen 14y ago
Part of the problem is thinking that laws are an effective solution.
DrJokepu 14y ago
Depending on the jurisdiction, it's entirely possible that a statute of limitations makes this irrelevant (in a legal sense). Obviously you still don't want future employers etc. to find this post.