lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Mon May 22 00:28:59 2006
From: n3td3v at gmail.com (n3td3v)
Subject: Urgent: For the attention of the intelligence
	services

yahoo hackers unite. yahoo is slowly but surely being taken over by a
bad element of yahoo employee. these employees are hired by each other
and fast tracked into sunnyvale. people say folks are vetted before
they are employed, although you can never have a check for social
background, the only checks possible are for criminal records. yahoo
employee hackers don't have criminal records, they are highly
interlligent folks, who have studied for years at universities. in
real life its easier to define a criminal, but when we're talking
about international hackers, there is no rule, there are no road
signs. what is needed is intelligence on the bad guys from a social
point of view. it is all very well using interviewing techniques, but
with that, your intelligence gathered at a job interview is only as
good as the would-be employee wants you to know.
you cannot save yourself from hackers getting into yahoo. once a
hacker is in yahoo, its very easy to gain the trust of co-workers.
once given a job, it would take a hell of a lot of evidence to unstick
them, and have grounds to fire them. i have intelligence on a social
level of someone who is a blackhat, every attempt to tip off yahoo and
make them convinced has failed, and you know what the worrying thing
is, this guy has hosted interviews and has successfully hired more
hackers. there is also intelligence that he wants in the long run to
hire more folks from a blackhat social background. i instant messaged
and have been e-mailing yahoo core security team for a sustained
period over the issue of the particular employee, who so far has
managed to divert attention from his activities by claiming everything
is false being made against him. a bunch of losers with a grudge,
bored kids, you know, any excuse the yahoo employee can think of to
keep his reputation clean. although this guy tipped off a blackhat
hacker that his im conversations were being monitored and this stopped
further intelligence gathering techniques being used on the blackhat
the yahoo employee tipped off. this tip-off wasn't a hear-say, there
was actual proof he tipped off a blackhat being monitored. yahoo say
for their security slogan "yahoo takes security very seriously",
though when its a threat from within, the yahoo employee is protected
by his other evil blackhat friends from within the security team. to
the whitehats of yahoo, they don't even know theres a blackhat
movement going on within yahoo's work force, even though for a long
time i've been trying to convince yahoo security team that the threat
is real, and data is leaving sunnyvale and being sent to third party
contacts. this yahoo employee was originally fast tracked into yahoo
by another blackhat. since that time, the spawning of more blackhat
insiders has been continuing. eventually yahoo will have an army of
blackhat insiders letting third party contacts know exactly whats
going on. its not to say theres no money in it, often top level google
employees offer folks money for yahoo corporate data and the likes,
and of course, if the price is right then who is going to say no?

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ