lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 22 Mar 2007 19:21:03 -0400
From: richfa1@....com
To: full-disclosure@...ts.grok.org.uk
Subject: XBOX ID's being Jacked

Kevin, 
 
My son's Xbox Live ID was jacked by "Brad" of the o Infamous o Clan. It happened in such a short amount of time that I don't feel that it was a case of Social Engineering. I did some research and came up with a way to do it using your Xbox, with Action Replay and a memory card, and the DVD of the game Splinter Cell, your PC Kernal IP Logger and an FTP program. It seems that the DVD has a copy of Linux on it that you use to help get the person's gamertag by using that person's IP address. 
 
I found the steps to do it on a message board. However, by the time I got to it, the message board admin had edited it and then also closed the thread. I think that the social engingineering angle is only a small percentage of the ID thefts. I have a feeling that the technical way is more likely how the majority of IDs are stolen.
 
Rich
________________________________________________________________________
AOL now offers free email to everyone.  Find out more about what's free from AOL at AOL.com.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists