On-Line Security - Be Careful

[Newfie]

Some of you may have seen a post by Mama Bear showing the contents of a spam E-Mail from someone in North Wales asking for money.

Well, that was from my G-Mail account, the one I've had for years.

It was hacked into Tuesday and I no longer have access to that account, nor will Google return access to me because I can't prove it's mine. In order to prove it's mine, I have to tell them day, month and year I created the account (and when I created other associated applications, like BookMarks, YouTube, etc.). Now I don't know about you people, but for me, the creation of an E-Mail account 6 or 7 years ago is hardly a "Life changing" occasion that sticks out in your mind like getting married, when you graduated, the birth of a child, etc.

Whoever did this changed passwords in everything associated with Google I commonly use. Because I can't access this E-Mail account, I also can't access FaceBook or YouTube, because I can't get into that E-Mail account to get the confirmation to change passwords to get access to the accounts.

So basically, in addition to the spam E-Mail issue and the embarrassment that comes with that, I've lost 6 or 7 years worth of E-Mail addresses, E-Mails kept for one reason or another, Favourites in Bookmarks, Youtube, Facebook, etc.

While I was careful about log-on particulars and never shared passwords with anyone, or never kept anything logged on for periods of time, it did happen to me.

It is worth noting that the support I'm getting from Google and FaceBook about the issue sucks, to say the least. I learned a lesson about "free" services provided on-line, such as these. When I called my ISP to report the issue, they couldn't do enough to help me as best they could, with changing of passwords, and even changed my IP Addy. That's the difference, I pay them and they (at least seem to) care.

If I get this sorted, and if some service doesn't improve from them (Google and anything associated), they can go straight to hell. I know they don't give a fiddler's you-know-what about 1 person, but I can walk away knowing I at least did something to try.

Fortunately, PayPal or Visa cards, all of which I use on-line, remain safe, at least for now.

Remember, it can happen to anyone, including YOU

 

[Gruder]

Thanks for the clarification and, most importantly, the excellent advice! The days of the "12345" password are definitely over!

 

[AndrewWiggin]

Anyone read Lifehacker? There was a post detailing what just happened to Newfie a few weeks ago.

There was also this article about Password Card, which generates a wallet sized key card for randomized passwords.

As a side note, this happened to me a few weeks ago. My gmail was hacked somehow (I still have no idea how, my password is a 7 character with numbers/letters) but I knew immediately because I got a deluge of mailer-daemons about unsendable mail. I immediately changed my passwords to Facebook, my second gmail account, and my bank account. I've now got a rotation of three passwords.

 

[gaseousclay]

I had my debit card hacked two weeks ago - over $200 was charged to some company in Beijing, China. these hackers are becoming increasingly more creative in learning how to steal from others.

 

[luvmysuper]

Thanks for the clarification and, most importantly, the excellent advice! The days of the "12345" password are definitely over!

Hey, how did you get my Bank Account PIN number?

 

[Stubblefield]

Hey, how did you get my Bank Account PIN number?

Actually, that's my dog's name!

Thanks for the warning. I just checked my Google checkout--they had saved my CC info! I deleted it.

 

[Dharion]

Losing an email account sucks. Helpful tips are already out there.

 

[Desdinova]

I have 8 email acccounts.

None of them are linked and each uses a different password.

Each email is used for a different funtion of online use.

If one gets hacked, then only a portion of my life is lost.

 

[RichGem]

Hey, how did you get my Bank Account PIN number?

And the security code to the Druidian air shield?


Interestingly, I've been getting weird (tho legit looking) email in my junk yahoo account. But, it seems like a case of someone with a legit yahoo account making a mistake in giving out his own addy. Maybe I should send him a plea for money.

 

[valmara1971]

Thanks for sharing great advice and I'm sorry you got caught. Had my ebay hacked last year thanks to an phishing email.

 

[s1mp13m4n]

I am using a program on Linux called Keepassx.

 

[TimmyBoston]

Thanks for the clarification and, most importantly, the excellent advice! The days of the "12345" password are definitely over!

Thanks for posting my password on the board Chad!!!!! I told you that in confidence!!!!

 

[RichGem]

Thanks for posting my password on the board Chad!!!!! I told you that in confidence!!!!

Funny, you don't look Druish.

 

[TheBigO]

Some of you may have seen a post by Mama Bear showing the contents of a spam E-Mail from someone in North Wales asking for money.

Well, that was from my G-Mail account, the one I've had for years.

It was hacked into Tuesday and I no longer have access to that account, nor will Google return access to me because I can't prove it's mine. In order to prove it's mine, I have to tell them day, month and year I created the account (and when I created other associated applications, like BookMarks, YouTube, etc.). Now I don't know about you people, but for me, the creation of an E-Mail account 6 or 7 years ago is hardly a "Life changing" occasion that sticks out in your mind like getting married, when you graduated, the birth of a child, etc.

Whoever did this changed passwords in everything associated with Google I commonly use. Because I can't access this E-Mail account, I also can't access FaceBook or YouTube, because I can't get into that E-Mail account to get the confirmation to change passwords to get access to the accounts.

So basically, in addition to the spam E-Mail issue and the embarrassment that comes with that, I've lost 6 or 7 years worth of E-Mail addresses, E-Mails kept for one reason or another, Favourites in Bookmarks, Youtube, Facebook, etc.

While I was careful about log-on particulars and never shared passwords with anyone, or never kept anything logged on for periods of time, it did happen to me.

It is worth noting that the support I'm getting from Google and FaceBook about the issue sucks, to say the least. I learned a lesson about "free" services provided on-line, such as these. When I called my ISP to report the issue, they couldn't do enough to help me as best they could, with changing of passwords, and even changed my IP Addy. That's the difference, I pay them and they (at least seem to) care.

If I get this sorted, and if some service doesn't improve from them (Google and anything associated), they can go straight to hell. I know they don't give a fiddler's you-know-what about 1 person, but I can walk away knowing I at least did something to try.

Fortunately, PayPal or Visa cards, all of which I use on-line, remain safe, at least for now.

Remember, it can happen to anyone, including YOU

Email the hacker asking for your account back. Usually they email back saying give me $xxx and I will. Use that as proof that your account as been hacked. Be as clear in your email to him as possible. Knowing your past few passwords might help confirm you are the owner.

I know a couple of people that used that technique to get their stuff back. Works with hotmail and yahoo very easily, I don't know about gmail. Can't hurt...

 

[AndrewWiggin]

Email the hacker asking for your account back. Usually they email back saying give me $xxx and I will. Use that as proof that your account as been hacked. Be as clear in your email to him as possible. Knowing your past few passwords might help confirm you are the owner.

I know a couple of people that used that technique to get their stuff back. Works with hotmail and yahoo very easily, I don't know about gmail. Can't hurt...

Brilliant!

 

[DavyRay]

Good passwords are often hard to remember. That's a problem. If you post about yourself anywhere, and you mention your favorite sports team, your daughter's name, your dog's name, your favorite anything, these can be good guesses for a password. Or qwerty.

 

[luvmysuper]

Thanks for the clarification and, most importantly, the excellent advice! The days of the "12345" password are definitely over!

Ok, I'm changing my bank PIN number.

Good passwords are often hard to remember. That's a problem. If you post about yourself anywhere, and you mention your favorite sports team, your daughter's name, your dog's name, your favorite anything, these can be good guesses for a password. Or qwerty.

Great Caesars Ghost! Will you guys stop that!!!

 

[CPA]

Thanks for the post. Online security is getting harder and harder. Identity thieves are getting very sophisticated and it is hard to keep up with them. I do an annual credit check just to make sure there are no credit cards or other items floating around that I do not know about.

 

[Mycon]

I usually leave my hint in the form of some bizarre riddle that sometimes even I have trouble remembering.

 

[Bertilak]

My gmail was hacked somehow (I still have no idea how, my password is a 7 character with numbers/letters) but I knew immediately because I got a deluge of mailer-daemons about unsendable mail.

This can happen without your having been hacked.

The Internet email system dates back to the early days and its security is not stellar, to say the least. There are a lot of "header" fields that get sent along with your email. Depending on your email client you may or may not be able to easily display these. Here are some header fields in the emails I get from B&B:

Return-Path: <[email protected]>
Subject: Reply to thread 'Please read!'
From: "Badger & Blade" <[email protected]>​

Note the "Return-Path" and note that it is different from the "From" field. You normally don't get to see "Return-Path" but it is where undeliverable mail gets sent. Spammers will often put addresses there they have scarfed up from mailing lists. I think this is to prevent *their* system from getting flooded with that stuff.

Anyone can send email and make it look like it came from you by messing with the header fields.

EDIT: I should add that the OP's difficulties are nothing like what I discussed here. I hope he is able to work things out!