SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : How high will Microsoft fly? -- Ignore unavailable to you. Want to Upgrade?


To: Mitch Blevins who wrote (28885)8/30/1999 1:04:00 PM
From: RTev  Read Replies (1) | Respond to of 74651
 
MSFT/Hotmail backdoor discovered.

You didn't post a link to the story, so I looked around to find it.

Hole in MSN Hotmail gives full access to email
news.com

Excerpt:
Two Web sites, one in the United Kingdom and one in Sweden, allow anyone to access any Hotmail account without a password. Would-be Hotmail pirates need only know a username to get in.

Amazingly enough, there are also several sites on the web that purport to provide a "quick" login service for users of Hotmail. This isn't really a Hotmail security issue, but it is certainly an "If you're this stupid..." issue. Several of these "quick access" pages are on the personal web pages of folks who provide virtually no more information about themselves. It's hard to believe that anyone would use such a page since the page owner could easily collect each name/password entered, but one never knows.

A search or two shows that hacking Hotmail accounts seems to be a popular task among that crowd. Many of the pages that show up on search engines are removed by the provider, indicating that Microsoft does an active search-and-destroy on the topic, but it's a revealing search nonetheless since it shows the popularity of the "exploit".
search.go2net.com