Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #159135

Re: [OT] Has my e-mail account been hacked?

From Brian <ad44@cityscape.co.uk>
Newsgroups linux.debian.user
Subject Re: [OT] Has my e-mail account been hacked?
Date 2015-10-14 11:10 +0200
Message-ID <qjqem-2hl-29@gated-at.bofh.it> (permalink)
References <qiMAh-1Y3-1@gated-at.bofh.it> <qiOiK-4vG-35@gated-at.bofh.it> <qjgyl-3GV-1@gated-at.bofh.it> <qjgI2-3S5-13@gated-at.bofh.it> <qjjZg-1gq-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Tue 13 Oct 2015 at 22:21:08 -0400, Stephen Powell wrote:

> On Tue, 13 Oct 2015 18:57:58 -0400 (EDT), Brian <ad44@cityscape.co.uk> wrote:
> > 
> > The comment was a general one and directed at all our readers. However,
> > earlier you said "Someone discovered my password somehow". You have
> > just demolished that guess as having no basis as a likely cause.
> 
> Likely, no, but still possible.  For example, when I update my web
> pages, I use my ISP's FTP server.  Suppose someone else on my ISP's subnet
> has a network sniffer in promiscuous mode.  The FTP server uses ordinary
> unencrypted FTP.  The userid and password are sent in clear text.  I wish
> they had an FTPS server, but the last time I checked, they didn't.  I use
> e-mail solely through a web-based e-mail client.  When I login, I don't
> know if the password is sent in clear text over the network or not.
> 
> That being said, if my password was obtained in this manner, I don't have
> much of a defense against it.  If I change my password, they can get the
> new one the same way as they got the old one.
> 
> Another possibility is a malicious web site that I may have unknowingly
> visited that managed to find a password in memory, a cookie, etc.  So
> despite all the precautions that I have taken, it is still possible for
> a password to be "discovered".
> 
> Having said that, it looks like someone else's credentials may have been
> used, based on some other posts to this thread.  But I am not an expert
> in these matters.  That's why I asked for help.

Your mails all have

  X-Authed-Username: emxpbnV4bWFuQHdvd3dheS5jb20=

The one to aol.com has

  X-Authed-Username: dGhlY291Z2hpbmdjYW5hcnlAd293d2F5LmNvbQ==

so did not come from your account.

Someone has access (legitimately or not) to the second account and is
sending mails with a forged envelope From. Your only recourse is to
present the evidence to the ISP and let them deal with it.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-12 16:50 +0200
  Re: [OT] Has my e-mail account been hacked? Florian Pelgrim <florian.pelgrim@craneworks.de> - 2015-10-12 17:00 +0200
    Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-12 23:00 +0200
      Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-13 02:00 +0200
        Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-13 06:40 +0200
          Re: [OT] Has my e-mail account been hacked? Jochen Spieker <ml@well-adjusted.de> - 2015-10-13 10:20 +0200
            Re: [OT] Has my e-mail account been hacked? Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2015-10-13 17:30 +0200
              Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-13 20:10 +0200
              Re: [OT] Has my e-mail account been hacked? Jochen Spieker <ml@well-adjusted.de> - 2015-10-13 22:10 +0200
              Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 04:10 +0200
            Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 04:00 +0200
              Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-14 04:20 +0200
                Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 05:00 +0200
                Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-14 05:20 +0200
                Re: [OT] Has my e-mail account been hacked? Adrian O'Dell <crimsonmane@gmail.com> - 2015-10-14 05:20 +0200
                Re: [OT] Has my e-mail account been hacked? John Hasler <jhasler@newsguy.com> - 2015-10-14 05:30 +0200
                Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-14 05:40 +0200
                Re: [OT] Has my e-mail account been hacked? Timothy Hobbs <timothy@hobbs.cz> - 2015-10-14 10:40 +0200
                Re: [OT] Has my e-mail account been hacked? Carl Fink <carl@finknetwork.com> - 2015-10-14 15:10 +0200
                Re: [OT] Has my e-mail account been hacked? Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2015-10-14 05:30 +0200
              Re: [OT] Has my e-mail account been hacked? Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2015-10-14 04:30 +0200
                Re: [OT] Has my e-mail account been hacked? Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2015-10-14 05:30 +0200
        Re: [OT] Has my e-mail account been hacked? Jimmy Johnson <field.engineer@gmail.com> - 2015-10-13 08:40 +0200
          Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-13 09:10 +0200
            Re: [OT] Has my e-mail account been hacked? Jimmy Johnson <field.engineer@gmail.com> - 2015-10-13 11:00 +0200
              Re: [OT] Has my e-mail account been hacked? <tomas@tuxteam.de> - 2015-10-13 11:00 +0200
                Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-13 11:10 +0200
                Re: [OT] Has my e-mail account been hacked? Jimmy Johnson <field.engineer@gmail.com> - 2015-10-13 11:20 +0200
          Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-13 21:10 +0200
          Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 03:30 +0200
            Re: [OT] Has my e-mail account been hacked? Jimmy Johnson <field.engineer@gmail.com> - 2015-10-14 11:00 +0200
        Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-13 13:20 +0200
        Re: [OT] Has my e-mail account been hacked? stelios kteniadalis <keste82@gmail.com> - 2015-10-14 12:40 +0200
  Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-12 18:40 +0200
    Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 00:50 +0200
      Re: [OT] Has my e-mail account been hacked? Adrian O'Dell <crimsonmane@gmail.com> - 2015-10-14 01:00 +0200
      Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-14 01:00 +0200
        Re: [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-14 04:30 +0200
          Re: [OT] Has my e-mail account been hacked? Brian <ad44@cityscape.co.uk> - 2015-10-14 11:10 +0200
            [SOLVED] [OT] Has my e-mail account been hacked? Stephen Powell <zlinuxman@wowway.com> - 2015-10-16 01:00 +0200
      Re: [OT] Has my e-mail account been hacked? Stuart Longland <stuartl@longlandclan.id.au> - 2015-10-14 03:30 +0200
  Re: [OT] Has my e-mail account been hacked? Jochen Spieker <ml@well-adjusted.de> - 2015-10-12 22:50 +0200

csiph-web