full-disclosure - XBOX ID's being Jacked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <8C93AEFE4F55FAC-C60-6ACE@webmail-db18.sysops.aol.com>
Date: Thu, 22 Mar 2007 19:21:03 -0400
From: richfa1@....com
To: full-disclosure@...ts.grok.org.uk
Subject: XBOX ID's being Jacked

Kevin, 

My son's Xbox Live ID was jacked by "Brad" of the o Infamous o Clan. It happened in such a short amount of time that I don't feel that it was a case of Social Engineering. I did some research and came up with a way to do it using your Xbox, with Action Replay and a memory card, and the DVD of the game Splinter Cell, your PC Kernal IP Logger and an FTP program. It seems that the DVD has a copy of Linux on it that you use to help get the person's gamertag by using that person's IP address. 

I found the steps to do it on a message board. However, by the time I got to it, the message board admin had edited it and then also closed the thread. I think that the social engingineering angle is only a small percentage of the ID thefts. I have a feeling that the technical way is more likely how the majority of IDs are stolen.

Rich
________________________________________________________________________
AOL now offers free email to everyone.  Find out more about what's free from AOL at AOL.com.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/