lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <456E0C75.4090004@gmail.com>
Date: Wed, 29 Nov 2006 22:40:53 +0000
From: "James (njan) Eaton-Lee" <james.mailing@...il.com>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: PayPal acount removal: bug or feature?



Valdis.Kletnieks@...edu wrote:
> Anybody else thinking 'phish'? :)

Actually, no - I experienced almost precisely the same thing with an old 
paypal account that we'd long since lost the password to and which was 
associated with a dead e-mail address, and I remember experiencing 
something similar to that described. I don't remember precisely how much 
information I had to provide other than the account name.

I don't know if this only works with long-idle accounts, but I do recall 
it being slightly odd at the time (and I checked the account was 
legitimately closed! Thankfully, I wasn't too shocked since the account 
was associated with dead bank details, anyhow..)

  - James.

-- 
   James (njan) Eaton-Lee | 10807960 | http://www.jeremiad.org
   Semper Monemus Sed Non Audiunt, Ergo Lartus - (Jean-Croix)

sites: https://www.bsrf.org.uk ~ http://www.security-forums.com
    ca: https://www.cacert.org/index.php?id=3
-- 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ