UGN Security Forums UGN Security: Underground Off Topic UGN Classics - Flashback from the past

<unreal> please SR, tell us that story about the great Skull and Wizzy?
<pergesu> me too! me too!

(story has been edited for the sake of entertainment, names have not been changed to protect the guilty)

-=12:51=- <SilentRage> ok, once upon a time, on many a times has happened before and after... a newb asked if there was any way to hack into hotmail and get somebody's pass
-=12:52=- <SilentRage> well, this night was a dark and stormy night, and Skull And Wizard was up for the challenge
-=12:52=- * unreal ph34rs
-=12:52=- <SilentRage> to answer finally what every newb wanted answered
-=12:52=- <SilentRage> It is said that they spent many long hours at the library
-=12:52=- <SilentRage> testing
-=12:52=- <SilentRage> researching
-=12:52=- <SilentRage> and they found a bug!
-=12:52=- <SilentRage> hotmail's lost password retriever
-=12:52=- <SilentRage> if you forget your password they say
-=12:53=- <SilentRage> you can have hotmail send the password to you
-=12:53=- <SilentRage> what hotmail does
-=12:53=- <SilentRage> is send a request for the password - behind the scenes - to a special email account
-=12:53=- <SilentRage> the request must be formatted a very specific way
-=12:54=- <SilentRage> The first word in the subject must be "getpass" and the second word the email account to retrieve the password for
-=12:54=- <SilentRage> the body must be 2 lines
-=12:54=- <SilentRage> the first line is email address of the user to recieve the password
-=12:55=- <SilentRage> the email that was to recieve the password that is
-=12:55=- <SilentRage> the second line is the password to that email account - for confirmation
-=12:55=- <SilentRage> then you must send it straight away to hotmail_lstpswrd@hotmail.com
-=12:55=- <SilentRage> Skull and Wizzy setup that fake email account
-=12:55=- <unreal> haha
-=12:55=- <SilentRage> and they say many respectable people fell for it
-=12:55=- <SilentRage> however, it is rumored that the newb was too dumb to follow instructions and therefor was spared from his own ignorance

(based on a true story that happened about 2 years ago)

/me remembers the day. great story sr..actually it was pwsbot_100@hotmail.com....but ya...MORE FLASHBACKS NEADED

I rember that... I remeber who fell for it too..

ha ha ha ha ha

some cool story SR...

well i heard about this thing about 6 months ago... or let me thik, yeah i read an article somewhere in the internet...

But i think it was another VERSION of this story... it said that hotmail uses BOTs to retrieve email account passwords...

If some of you remembers, in the Terms of Hotmail it sais that HOTMAIL STUFF WILL NEVER ASK YOU FOR YOUR PASSWORD... so the article said that the reason for that is the fact that hotmail uses bots and that's why hotmail stuff never asks for your passwords...

so they figured out a way how to do it which was pretty much same as SR explained in the story... the email was suposed to be sent to ACTIVATE the bot which would then send you back the password of the email you need.. but you HAD to provide your email password as they said.. TO MAKE THE BOT THINK THAT IT'S AN ADMIN PASSWORD.. well sounds pretty much stupid too me but who knows.. maybe it worked someday...

see ya guys

P.S. It's good to be back

Dude, shut the [censored] up.

I think I know who fell for it now...

thebluegiant... watch your lang babyboy..

and perg, too bad it's not what you think...

Dude, shut the [censored] up.

now you gonna tell me to watch my 'lang'?

What isn't what I think? Do you even know what I'm talking about? If so, what is "it" after all?