full-disclosure - Re: PayPal acount removal: bug or feature?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 29 Nov 2006 22:40:53 +0000
From: "James (njan) Eaton-Lee" <james.mailing@...il.com>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: PayPal acount removal: bug or feature?

Valdis.Kletnieks@...edu wrote:
> Anybody else thinking 'phish'? :)

Actually, no - I experienced almost precisely the same thing with an old 
paypal account that we'd long since lost the password to and which was 
associated with a dead e-mail address, and I remember experiencing 
something similar to that described. I don't remember precisely how much 
information I had to provide other than the account name.

I don't know if this only works with long-idle accounts, but I do recall 
it being slightly odd at the time (and I checked the account was 
legitimately closed! Thankfully, I wasn't too shocked since the account 
was associated with dead bank details, anyhow..)

  - James.

-- 
   James (njan) Eaton-Lee | 10807960 | http://www.jeremiad.org
   Semper Monemus Sed Non Audiunt, Ergo Lartus - (Jean-Croix)

sites: https://www.bsrf.org.uk ~ http://www.security-forums.com
    ca: https://www.cacert.org/index.php?id=3
-- 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/