Re: [Security-Discuss] This is odd, too

On May 27, 2004 03:09 am, Anne Wilson wrote:
...........
> ;-)  I understood you.  What bothers me is the account it went to.  I do
> not use that account on any list.  In fact, outside the family there
> are very few people who know it.  I'm very concerned about how they got
> that one.
>
> I can drop my tiscali account at any time that it becomes too big a
> problem, but I don't want to compromise that one.
>
> Anne

I believe they set up nodes (could even just be a simple cable user etc), and 
"sniff" all passing packets, and parse the headers, for legitimate addresses. 

 I once thought I was clever, and used the kmail "bounce" feature.  All I 
accomplished was to give them another header to parse, and extract my "good" 
email address from. 

 Now I need to dump both the proxy addy, and the "good" alias I was using with 
trusted lists.

I have seen reference by the "script kiddies" to the practice of intercepting 
and reading email. Since this is easy to do, I expect that to be one of the 
methods used.

I suppose, one also has to "allow" for the possibility that some lists may 
simply be poorly administrated, such as the proxy email account I 
referenced...

Cheers,

Jorgen

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________