[nsp-sec] Yahoo / Hotmail accounts

[Igor Gashinsky]

ACK for yahoo (over private mail).

-igor

On Tue, 27 Sep 2011, Jon Lewis wrote:

:: ----------- nsp-security Confidential --------
:: 
:: I posted about this yesterday on another private list where I thought each 
:: of these orgs had representation.  There's been no reply, so I'll try 
:: again here:
:: 
:: While analyzing the disk from a cloud server terminated for AUP 
:: violations, I found files containing 10s of thousands of apparently valid 
:: yahoo and msn/hotmail username/passwd pairs.  I tested a few of each just 
:: to see if they were valid.
:: 
:: If someone contacted me saying they had a list of accounts and passwords 
:: for my users/systems, I'd want the list, and I'd lock all the accounts 
:: ASAP.
:: 
:: Perhaps I'm foolish for thinking Yahoo or Hotmail would do the same?
:: 
:: ----------------------------------------------------------------------
::   Jon Lewis, MCP :)           |  I route
::   Senior Network Engineer     |  therefore you are
::   Atlantic Net                |
:: _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
:: 
:: 
:: _______________________________________________
:: nsp-security mailing list
:: nsp-security at puck.nether.net
:: https://puck.nether.net/mailman/listinfo/nsp-security
:: 
:: Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
:: community. Confidentiality is essential for effective Internet security counter-measures.
:: _______________________________________________
:: 

--------------------+----------------------+------------------
   Igor Gashinsky   | Network Architecture | Yahoo! Inc.
 igor at yahoo-inc.com |  cell 917.807.2213   | Do You... Yahoo?
--------------------+----------------------+------------------