EEVblog Electronics Community Forum

EEVblog => EEVblog Specific => Topic started by: JanJansen on April 21, 2018, 08:53:10 am

Title: Microsoft wont let me in my email anymore
Post by: JanJansen on April 21, 2018, 08:53:10 am
Hi, i am no longer allowed in my email,
i registered at many forums and shops with my email adress, is it going to be a problem ?
How can i hack my own email ?

They say they want my credit card to verify my age, while i find this online :
https://cloudblogs.microsoft.com/microsoftsecure/2013/08/01/microsoft-wont-ask-for-your-credit-card-to-unblock-your-email-account/

It says :
I’m getting messages from Microsoft about my email account. The messages say that my account is blocked and I can only unblock it with a credit card number. Is this legit?

No, these messages sound like a phishing scam, a type of identity theft designed to steal your personal information, such as credit card numbers, passwords, account data, or other information. Never provide personal information in response to requests like this. In fact, it’s best not to respond at all. Instead, delete the email message and report it.

If you can’t access your email account, get information on how to recover your hacked account.


I dont know what to do, any advice for me ?, i am a emailless person now.
thanks
Title: Re: Microsoft wont let me in my email anymore
Post by: BravoV on April 21, 2018, 09:05:21 am
If you can’t access your email account, get information on how to recover your hacked account.

I dont know what to do, any advice for me ?, i am a emailless person now.
thanks

I don't use Microsoft email, but my personal emails hosted on popular free email hostings, they have feature to reset password through confirmation by my registered cell phone, of course you need to enable this option 1st before hand.

Infact my emails account will instantly notify me if there is any login occurred at new device that has not been approved by my self before, and it simply offers me to allow or either kill it.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on April 21, 2018, 09:09:47 am
Your message is not very clear, so it is hard to respond.

Are you saying you are entering your correct username and password and the account will not allow you to log in?

Normally if this were to happen the action would be to use a password recovery mechanism. The recovery mechanism may involve a secondary email address, a mobile phone number and text message, the answers to various security questions or similar. If none of these are successful you would have to contact customer support for advice.

You may be able to get more specific advice from this forum if you tell us which specific email service you are locked out of (hotmail? outlook.com? other?)
Title: Re: Microsoft wont let me in my email anymore
Post by: Andy Watson on April 21, 2018, 09:11:02 am
Definitely a scam.

Try resetting your password:
https://support.microsoft.com/en-us/help/12429/microsoft-account-sign-in-cant

Also, determine how you've been locked-out and phished - have your got a virus or other malware on your computer?
Double check that the address/URL that you are using for your email is correct - letter for letter - and not a spoof page.
Title: Re: Microsoft wont let me in my email anymore
Post by: BravoV on April 21, 2018, 09:13:23 am
The OP's quest made me suspect he run out of recovery options like didn't put 2nd email, phone, forgot recovery question and etc, as these are pretty straight forward.
Title: Re: Microsoft wont let me in my email anymore
Post by: DC1MC on April 21, 2018, 09:17:28 am
Hi Jan, it's sad to see  :o  that in 2018 there are still people using windows for online stuff, in the age of hundred gigabytes SSDs where you could have made a small 100GB partition, install Ubuntu or Linux Mint and surf worriless  :palm:. If you need to use some MS  only program, boot on windows and use it, but don't go online, or you'll get p0wn3d, in the best case you'll mine coins and spread propaganda and spam, in the worst case you'll lose all your money and get you identity stolen.
 
I have the following advice for you, that may still recover something or at least reduce the damage:
Your Windozian machine was169% pwn3d  long ago , carefully remove all the hard disks and shred them away  >:D, or at least boot from a R/O medis with a Linux distribution and wipe them fully.
Then immediately cancel all your credit cards used  online and change the passwords to all online banking, social or governmental sites you've used, from a secure, freshly installed, Linux machine, not from your phone (a good chance that is also 169% pwn3d as well).
The go to a computer literate friend and download a Linux distribution, burn a CD or a live USB stick and boot from it.
Type manually outlook.com and enter your email and last known password.
If you're lucky it was just your browser hijacked and got only the classic scare, reformat the PC and don't use windows anymore. Chance less than < 5%.
Usually the cracker will change your password, remove or modify the recovery email and phone number, but if you're a lucky person, request a password change code to be sent to your phone or recovery email if this is not taken over as well. Chance less than 35%
If these are gone as well (chance more than 95%), than you have to contact Microsoft support, usually the complaints of non-paying are ignored, but my maybe you'll be lucky and they help you recover your account, if not, install Linux get a new mail, enable 2-factor authentication, and take it as a lesson for the future. Don't forget to cancel all your card used online and change all your passwords as well.

 Best of luck, because you will need it,
 DC1MC

Title: Re: Microsoft wont let me in my email anymore
Post by: Andy Watson on April 21, 2018, 09:17:51 am
The OP's quest made me suspect he run out of recovery options like didn't put 2nd email, phone, forgot recovery question and etc, as these are pretty straight forward.
Yes, it's a bit vague. But how would giving credit-card details help? It's definitely a scam of some form.
Title: Re: Microsoft wont let me in my email anymore
Post by: DC1MC on April 21, 2018, 09:20:45 am
The OP's quest made me suspect he run out of recovery options like didn't put 2nd email, phone, forgot recovery question and etc, as these are pretty straight forward.
Yes, it's a bit vague. But how would giving credit-card details help? It's definitely a scam of some form.

It will help a lot the cracker, Jan he will lose the little money who are left in the account, and if the CC has actually a few KEUR overdraft, then lose these euros as well.

 DC1MC

 
Title: Re: Microsoft wont let me in my email anymore
Post by: NivagSwerdna on April 21, 2018, 09:36:54 am
Hi Jan, it's sad to see  :o  that in 2018 there are still people using windows...
... and back in the real world.... Sounds like phishing.
Title: Re: Microsoft wont let me in my email anymore
Post by: Brumby on April 21, 2018, 09:43:40 am
... and back in the real world....

Oh, good.  I'm glad it wasn't me.
Title: Re: Microsoft wont let me in my email anymore
Post by: Jeroen3 on April 21, 2018, 10:35:12 am
Microsoft decides to comply to eu laws today. GPDR.
To protect minors of course.

Here another topic of someone who’s underage kids can no longer acces their Microsoft account, including all files for school and steam games since windows won’t login either.

https://gathering.tweakers.net/forum/list_messages/1849211
Title: Re: Microsoft wont let me in my email anymore
Post by: mikerj on April 21, 2018, 10:35:23 am
Hi Jan, it's sad to see  :o  that in 2018 there are still people using windows for online stuff, in the age of hundred gigabytes SSDs where you could have made a small 100GB partition, install Ubuntu or Linux Mint and surf worriless  :palm:. If you need to use some MS  only program, boot on windows and use it, but don't go online, or you'll get p0wn3d, in the best case you'll mine coins and spread propaganda and spam, in the worst case you'll lose all your money and get you identity stolen.

I'm not a Linux user so I hope you can explain how using Linux on your own PC prevents theft of your personal information from third party servers?
Title: Re: Microsoft wont let me in my email anymore
Post by: Karel on April 21, 2018, 10:54:52 am
I'm not a Linux user so I hope you can explain how using Linux on your own PC prevents theft of your personal information from third party servers?

Eh... maybe by lowering the chance that your pc gets infected so that the culprits can not steal your saved logins?

Title: Re: Microsoft wont let me in my email anymore
Post by: DC1MC on April 21, 2018, 11:05:07 am
Hi Jan, it's sad to see  :o  that in 2018 there are still people using windows for online stuff, in the age of hundred gigabytes SSDs where you could have made a small 100GB partition, install Ubuntu or Linux Mint and surf worriless  :palm:. If you need to use some MS  only program, boot on windows and use it, but don't go online, or you'll get p0wn3d, in the best case you'll mine coins and spread propaganda and spam, in the worst case you'll lose all your money and get you identity stolen.

I'm not a Linux user so I hope you can explain how using Linux on your own PC prevents theft of your personal information from third party servers?

Well, usually it goes like this:

You surf some legitimate sites and got hit by a drive by Javascript injection attack via some ad, don't need to go to shaddy sites anymore nowadays, eventually open a PDF file for an old part, found somewhere on on the net from a Chinese site and you AdobeReader is not patched or is a zero-day exploit. The payload is downloaded, launched and take fully the control of your PC, in a very intrusive mode,  may say.
Now your PC is on of the millions of windows remote controlled PCs.

First the newly joined machine is searched for any information that may prove useful to the bootnet masters, do you have security clearance, do work for a government agency or important company, if not you can still mine some coins and do some DDOS attacks, also if you do your banking your account details and passwords are most welcome.

None of this ?

Don't worry, we'll do a browser hijack, and instead of outlook.com now your saved email page goes to cracker.com phising page and if you give the CC details, score !!!


None of this would happen when using Linux, because:

 - The normal user account is not a privileged account, no programs are installed without your consent and even with your consent is difficult  :-DD.
 - Reduced attack surface due to better security architecture and not the least because the Linux distributions are fragmented and isn't worth building personalized exploits.
 - No Adobe Reader anymore (big win), rarely the flash works.

So, in my experience I've never ever heard of some Linux desktop remote exploit, browser hijacking and similar stuff, of course the human factor will still click links in the mails and go to PäyPal.com, but this unavoidable.

 Do you want to know more ?  ::)

 DC1MC
 
 
Title: Re: Microsoft wont let me in my email anymore
Post by: Yansi on April 21, 2018, 11:43:47 am
Just a little offtopic wow: Are people (parents) these days so stupid and naive, to make their children email (or whatever else) accounts, at the big boys companies? Or to use cloud for your personal data? Just pure wow... I never thought that there is so many naive people these days. But as less and less people understand the basics of IT, it kind of makes sense (and profit for the big boys).

Kind of sad.
Title: Re: Microsoft wont let me in my email anymore
Post by: Maxlor on April 21, 2018, 12:40:00 pm
None of this would happen when using Linux, because:

 - The normal user account is not a privileged account, no programs are installed without your consent and even with your consent is difficult  :-DD.
 - Reduced attack surface due to better security architecture and not the least because the Linux distributions are fragmented and isn't worth building personalized exploits.
 - No Adobe Reader anymore (big win), rarely the flash works.
I don't think you're doing Linux much of a service by telling people stuff like that. It comes off as smug superiority, not as convincing. And it's not even accurate:

- Whether a user account is privileged or not is irrelevant when an attacker is snooping for sensitive information such as passwords, credit card numbers etc..
- Whether a user account is privileged or not is irrelevant when most attacks nowadays target running applications. Hijacking a running browser process is enough to do damage, you don't need to modify the on disk binary. Especially since Linux users tend not to reboot often.
- Even with an unprivileged account you can deploy code that runs on startup. Just throw a startup script into ~/.config/autostart, that launches a binary somewhere else in the user's home dir. It's unlikely to be discovered by the user, and certainly not by antivirus software since no Linux user I know runs that.
- If you're running as local user, getting root is not impossible. Local root exploits pop up every so often and don't receive anywhere near the same attention as remote exploits, obviously. So how many of them are still unpatched in your system?
- Better security architecture – are you kidding me? Linux has the same old root/user separation it's always had; I only very rarely see advanced stuff like MAC used on a desktop. Windows nowadays has a much more modern security architecture.
- Well, not running Adobe's craptastic software certainly helps. But err... you do know that there are other PDF readers for Windows and MacOS X too? And that Flash is about to be gone altogether anyway?

I think the biggest thing that keeps Linux users safe on the web is their low profile (there aren't that many of them, it's not that interesting to target them) and they're higher level of knowledge (they tend to do stupid/risky stuff less often.) It's really not because the people making Linux know something that the people making Windows don't.

The biggest reason I use Linux whenever I can then is not security, but control. It happens a lot less often that my computer is doing sneaking stuff behind my back with Linux than it does with Windows or OS X. And it's much easier for me to adapt a Linux system to my way of doing things, than to do the same with Windows and OS X. But I perfectly understand if that isn't a convincing point for people – having control, and using productively it takes a considerable amount of effort. If they don't want to spend the time and accept the small pain of adapting themselves to the computer instead of the other way round, that's perfectly fine too.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 21, 2018, 03:28:37 pm
Jeroen is right, it has to do with the EU law.

I have the password of my hotmail.nl account offcourse,
can i still hack it somehow ?, or is it hard to hack if you have the password already ?

I went to microsoft because google had something new : they read your emails for you,
so after i had hotmail, microsoft also started to reading your mails,
i had no choise, i need some email adress, ( let them read that i buy transistors for 3 cent and resistors for 0,5 cent, they cant advertise for that cheap, only i have the feeling there is more to it then advertising only )

Then all the sudden microsoft wanted my second email adress or phone number, and now my creditcard number, ( first they read my mail for advertizing, now they want to call me with a nice offer ?, and now they want my money without any offer )

So if anyone know how i could hack my own email ?, its perfectly legal so dont hezzitate.

By the way, if microsoft wasnt so dumb while reading my mail, they could have know that i am older then a kid.

And no i dont want any linux, maybe windows runs on linux now these days ?
Anyway i hope microsoft go broke, i dont give them the 50 cent they wanting.
After that i will install linux, its all the same, windows has more users, so is more intresting for virus makers, dont say you are save on linux, i dont believe you.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on April 21, 2018, 05:40:32 pm
Microsoft decides to comply to eu laws today. GPDR.
To protect minors of course.

Here another topic of someone who’s underage kids can no longer acces their Microsoft account, including all files for school and steam games since windows won’t login either.

https://gathering.tweakers.net/forum/list_messages/1849211

I can't help thinking that if this were real then it would be all over the Internet. But a Google search turns up nothing. So is it really a hack or a phishing scam as others have suggested?
Title: Re: Microsoft wont let me in my email anymore
Post by: Jeroen3 on April 21, 2018, 06:22:00 pm
To be affected by it, you have to be a minor or you have lied.
https://blogs.microsoft.com/on-the-issues/2018/04/11/microsoft-begins-new-eu-gdpr-parental-consent-verifications-for-childrens-accounts/

How can it be phishing if you login at live.com and are served this message with the option to pay 0,50 dollar or send in a copy of valid identification?
The phisers would have to be in your browser to start with, then this is a really poor method.

Google did the same a few months ago.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on April 21, 2018, 06:38:16 pm
OK, so it seems to be real. But I still surprised there is so little discussion of it online. It seems like something that would prompt lots of questions and complaints, yet a search with relevant keywords didn't even turn up that Microsoft link.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on April 21, 2018, 06:45:20 pm
Jeroen is right, it has to do with the EU law.

I have the password of my hotmail.nl account offcourse,
can i still hack it somehow ?, or is it hard to hack if you have the password already ?

I went to microsoft because google had something new : they read your emails for you,
so after i had hotmail, microsoft also started to reading your mails,

Don't be paranoid. Emails have never been private or confidential. In the early days they were sent over the wire in plain text for everyone to read.  Maybe they still are.

If you are an adult you have no choice apparently but to comply with the requirements and provide a credit card, or provide some other proof of age and identity.

After that, start lobbying your legislators about annoying laws and consider voting for people who will oppose them.
Title: Re: Microsoft wont let me in my email anymore
Post by: Jeroen3 on April 21, 2018, 08:27:00 pm
Don't be paranoid. Emails have never been private or confidential. In the early days they were sent over the wire in plain text for everyone to read.  Maybe they still are.
You only have control over the connection to the first mail server. Whatever happens next is beyond you. All mail servers in between can read (archive and change) the contents unless you use PGP.
This is why FAX is still used, your message is delivered immediately, and theoretically, isn't stored or altered by any servers in between.

After that, start lobbying your legislators about annoying laws and consider voting for people who will oppose them.
We just got these laws to limit the freedom of US companies with EU data. And to just raise the security and awareness in companies handing any data have.

OK, so it seems to be real. But I still surprised there is so little discussion of it online. It seems like something that would prompt lots of questions and complaints, yet a search with relevant keywords didn't even turn up that Microsoft link.
As I said, only if microsoft assumes you are a minor you have your account blocked. The amount of people will be low. And it's not like microsoft is wrong that people will rant about it on the internet.
Title: Re: Microsoft wont let me in my email anymore
Post by: Karel on April 22, 2018, 07:27:01 am
It's unlikely to be discovered by the user, and certainly not by antivirus software since no Linux user I know runs that.

There's no need to run av because it doesn't protect you. It just informs you afterwards that you have been infected, when it's too late.
Everyday, new malware is released which is not recognised by av despite heuristic analysis. It takes at least a couple of days
before the new malware has been reported, analyzed, added to the av-list and updated to the clients. In the meantime many
pc's are already infected.
One could argue that it's better to have just three pieces of malware installed on your pc instead of hundred, but in the end
I don't think it makes much difference...

And let's not start about the risks to brick your windows installation because the av accidentally put some important system files in quarantaine...

I think the biggest thing that keeps Linux users safe on the web is their low profile (there aren't that many of them, it's not that interesting to target them)...

I agree.

... and they're higher level of knowledge (they tend to do stupid/risky stuff less often.) It's really not because the people making Linux know something that the people making Windows don't.

Windows is made for the masses. Linux is made by engineers, for engineers.
They have different requirements and because of that, the result is different.

The biggest reason I use Linux whenever I can then is not security, but control. It happens a lot less often that my computer is doing sneaking stuff behind my back with Linux than it does with Windows or OS X. And it's much easier for me to adapt a Linux system to my way of doing things, than to do the same with Windows and OS X. But I perfectly understand if that isn't a convincing point for people – having control, and using productively it takes a considerable amount of effort. If they don't want to spend the time and accept the small pain of adapting themselves to the computer instead of the other way round, that's perfectly fine too.

The biggest reason I use Linux 99% of the time (at work and at home),  is security, control and ease of use (compared to the alternatives).
Title: Re: Microsoft wont let me in my email anymore
Post by: bd139 on April 22, 2018, 08:44:23 am
Interesting thread.

Linux won't give you "any more security". Not unless you've configured SELinux properly, which you probably haven't. For example if there is a buffer overrun in Firefox then it can escalate quite happily to run execve() and piss all over your user account unless it's in an SELinux context which allows access to only the files and network sockets that Firefox needs to run. Once your user account is compromised then it's game over either way as that's where your data lives which is the highest protection priority on the system. The main reason to run Linux is "functional idempotency" which means every time you get it to do something it does the same thing, and does it pretty damn quickly, unlike certain monolithic lumps of poo from Redmond. Oh and it's free.

Antivirus is a scurge. It's necessary only for some class of user called "the dumbass". In some cases it's actually likely more harmful than using none. Look at microsoft Defender / Security Essentials. The virtual machine in the sandbox executes as SYSTEM. This lead to some privilege escalation attacks as Google found out in Project Zero. And then there's the false positive, the rampant destroyer of network stacks!

A point on the cloud: it's a compromise. I personally don't use any cloud based services for anything critical because I have been on the raw end of a company pulling their services at zero minutes notice resulting in a mass migration which cost a company a week of downtime. However I run my own domain and subcontracted the email services out to fastmail as they do a better job of SPF, DKIM etc than I could be bothered with. I run inbox zero i.e. I can afford to lose the service instantly and carry on. I just move my domain over to another provider. The cloud from an infrastructure perspective is ok i.e. if your software is portable but all the ancillary PaaS services which are difficult to escape is a ridiculously dangerous situation and should be avoided. For example: use RabbitMQ on an EC2 instance instead of AWS's SQS service. You can move RabbitMQ but you an't move SQS. And then there's the geopolitical instability of using a foreign country's services.

Really:

1. Use linux but don't assume it's any better for your security, mainly just your sanity and productivity. Most of the attack vectors are still there but just not exploited routinely.
2. User diligence is more important than safety nets.
3. Make sure you can move everything you have off the cloud in a snap if you have to.

Title: Re: Microsoft wont let me in my email anymore
Post by: Stefan Payne on April 23, 2018, 03:58:31 am
None of this would happen when using Linux, because:

 - The normal user account is not a privileged account, no programs are installed without your consent and even with your consent is difficult  :-DD.
 - Reduced attack surface due to better security architecture and not the least because the Linux distributions are fragmented and isn't worth building personalized exploits.
 - No Adobe Reader anymore (big win), rarely the flash works.

So, in my experience I've never ever heard of some Linux desktop remote exploit, browser hijacking and similar stuff, of course the human factor will still click links in the mails and go to PäyPal.com, but this unavoidable.
1. Same with Windows. If something wants Admin Privileges, Windows asks you if it is OK, well if you didn't disable this and this is standard since 2006 or so, Vista
2. So you're saying that its less vulnerable to attacks because nobody uses Linux...
But that Argument is Bullshit since Linux goes down to some single points of failure, the Kernel, systemD and other Libarys that most distributions use. The biggest differences between those is the Package Manager, not the Libarys.
3. Since Windows 10 nobody uses that no more, Windows has its own tools for PDF files and even can print PDF files.

So in the End you are just flaming Windows for no reasons, because you believe in Linux...

I like new things and tried Linux many times and its not as awesome as some Linux Fans make it out to be. And if they would be honest, it would help more people converse to Linux  than telling people its the best there will ever be.

And to be blunt:
The Strongpoint of Linux is its modularity. If you really know what you are doing, you can build a Linux that's really well suited for whatever you are going to do with it.

As a Desktop OS, Linux is a Pile of Shit, because the Window Managers are so ancient, badly imitate mac OSX (Gnome, rotate the Apple Dock by 90° Clockwise...) while not beeing that user friendly at all.
And KDE for example doesn't even support streaming from Windows Shares.

So no, Linux at a Desktop OS is not a good idea. Especially if someone isn't interested in Command Line Stuff.
Because that's still needed today.


Sorry, but for Endusers, there are just two possibilitys right now:
Windows
MacOSX

Both are viable options. Linux is not really. Most of the Window Maneger Things are at a Level of Windows Vista at most, many even Windows 95. Or worse.
I think it was in the Linux Mint 18.2 or so Changelog where they mentioned that Mate is now able to put the Startbar to the left or right side. Yeah, Windows 95 already could do that...


Anyway, back to topic:
That sounds phishy....
Don't give them your Credit Card information!
Title: Re: Microsoft wont let me in my email anymore
Post by: bd139 on April 23, 2018, 06:34:54 am
I’m using xfce. That seems fine. I agree that most of the desktops are shit though.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 23, 2018, 02:53:39 pm
To be affected by it, you have to be a minor or you have lied.

I always go for the oldest age available,
at the moment you can choose up to 1 januari 1905.
Maybe when i registered this email i selected year 1900 ?
Title: Re: Microsoft wont let me in my email anymore
Post by: ebastler on April 23, 2018, 04:56:02 pm
I always go for the oldest age available,
at the moment you can choose up to 1 januari 1905.
Maybe when i registered this email i selected year 1900 ?

That would explain why Microsoft has disabled your email.
Their algorithms have determined that you must be dead by now.  ::)
Title: Re: Microsoft wont let me in my email anymore
Post by: Fungus on April 24, 2018, 09:03:01 am
I always go for the oldest age available,
at the moment you can choose up to 1 januari 1905.
Maybe when i registered this email i selected year 1900 ?

That would explain why Microsoft has disabled your email.
Their algorithms have determined that you must be dead by now.  ::)

Was it two days ago? That's when the only remaining person from the 19th century died:

https://bnonews.com/site/index.php/2018/04/oldest-living-person-nabi-tajima-dead-at-117/

If so, you have to admire Microsoft's diligence in patching security holes.


Title: Re: Microsoft wont let me in my email anymore
Post by: mikerj on April 24, 2018, 11:31:50 am
I'm not a Linux user so I hope you can explain how using Linux on your own PC prevents theft of your personal information from third party servers?

Well, usually it goes like this:

You surf some legitimate sites and got hit by a drive by Javascript injection attack via some ad, don't need to go to shaddy sites anymore nowadays,

I use a script blocker.

eventually open a PDF file for an old part, found somewhere on on the net from a Chinese site and you AdobeReader is not patched or is a zero-day exploit. The payload is downloaded, launched and take fully the control of your PC, in a very intrusive mode,  may say.
Now your PC is on of the millions of windows remote controlled PCs.

I don't use any Adobe products.

First the newly joined machine is searched for any information that may prove useful to the bootnet masters, do you have security clearance, do work for a government agency or important company, if not you can still mine some coins and do some DDOS attacks, also if you do your banking your account details and passwords are most welcome.

None of this ?

Don't worry, we'll do a browser hijack, and instead of outlook.com now your saved email page goes to cracker.com phising page and if you give the CC details, score !!!

I don't use web email, so it would have to be an email client hijack.

None of this would happen when using Linux, because:

 - The normal user account is not a privileged account, no programs are installed without your consent and even with your consent is difficult  :-DD.
 - Reduced attack surface due to better security architecture and not the least because the Linux distributions are fragmented and isn't worth building personalized exploits.
 - No Adobe Reader anymore (big win), rarely the flash works.

So, in my experience I've never ever heard of some Linux desktop remote exploit, browser hijacking and similar stuff, of course the human factor will still click links in the mails and go to PäyPal.com, but this unavoidable.

 Do you want to know more ?  ::)

 DC1MC
 

Yes, I would like you to answer my original question, rather than trying to divert the issue.

If a hacker compromises a third party server holding personal data (as happens quite frequently), how will running Linux on my desktop/laptop prevent the hacker gaining access to my data?  For instance, back in 2013 when Yahoo had around 1 billion user accounts compromised, were all the users running Linux protected?
Title: Re: Microsoft wont let me in my email anymore
Post by: MT on April 24, 2018, 12:25:22 pm
If you can’t access your email account, get information on how to recover your hacked account.
I dont know what to do, any advice for me ?, i am a emailless person now.
thanks

https://protonmail.com/

The only third part hacker today is the conglomerate of CIA, NSA, DOD,IRS, FBI.
Title: Re: Microsoft wont let me in my email anymore
Post by: metrologist on April 24, 2018, 02:12:27 pm
Just a little offtopic wow: Are people (parents) these days so stupid and naive, to make their children email (or whatever else) accounts, at the big boys companies? Or to use cloud for your personal data? Just pure wow... I never thought that there is so many naive people these days. But as less and less people understand the basics of IT, it kind of makes sense (and profit for the big boys).

Kind of sad.

People? Yes. Not all parents. Around here at 6th grade, the kids all get chrome books or ipads, and fresh accounts for them. Schools are also using sites like shutterfly to host daily in-class photo-ops and extracurricular activities. More free website services are engaged more and more for these kids. They all soon get cell phones with unlimited text and photo messaging and gobs of data to freely surf all the most bestest sites online...

I see, the best way to protect privacy is for more and more large conglomerates to request more and more of your personal info.  :palm:
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 24, 2018, 03:33:56 pm
Was it two days ago? That's when the only remaining person from the 19th century died:

https://bnonews.com/site/index.php/2018/04/oldest-living-person-nabi-tajima-dead-at-117/

If so, you have to admire Microsoft's diligence in patching security holes.

Thats right then, very funny.
Artificial intelligence dont likes humans.

Title: Re: Microsoft wont let me in my email anymore
Post by: Distelzombie on April 26, 2018, 03:01:06 am
Get a proton mail: www.protonmail.com (http://www.protonmail.com)
It's two factor authentication makes it, I guess, hard to impossible to get into that account even if you hijack the browser and login credentials. It is, for a change, advised to use google authenticator on a smartphone.
I use that for all important things and a GMX mail for all the other stuff, like this forum.

You'll also get a protonVPN account at the same time. I use that for my smartphone as a always on vpn. It's free version is fast enough. Still has 50Mbit through netherlands or USA.
If I want more privacy, I boot up Parrot Sec in a VM on my laptop, connect to the VPN and then use it's anonsurf function to route my traffic through the Tor network. After that I still have several MB download and unimpeded upload. (12Mbit. For some reason ???)

That's very easy to do, too.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 26, 2018, 03:20:08 pm
I dont need a smartphone, just email.
Title: Re: Microsoft wont let me in my email anymore
Post by: bd139 on April 26, 2018, 03:44:25 pm
Try fastmail. Decent email service costs money. Buy a domain and you are mobile if fastmail turns to crap. I've used them for about 3 years no with zero problems.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 26, 2018, 04:21:00 pm
I made a new gmail acount with no problems.
Time to make all new forum profiles sooner or later.

They can hack my mail all they want, google can read all my mails no problem, as long as i can read the mail myself also.
Title: Re: Microsoft wont let me in my email anymore
Post by: ebastler on April 26, 2018, 04:56:59 pm
Time to make all new forum profiles sooner or later.

Why would you need to do that? Can't you just change passwords and email addresses in your existing profiles?
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on April 26, 2018, 05:10:08 pm
Then i cant read the verification mail.
I would like it, only then i am afraid i will lock up this account also.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on April 26, 2018, 05:23:34 pm
Then i cant read the verification mail.
I would like it, only then i am afraid i will lock up this account also.

Why would you lock up an account? We still don't understand why your previous account got locked...
Title: Re: Microsoft wont let me in my email anymore
Post by: ebastler on April 26, 2018, 06:43:37 pm
Then i cant read the verification mail.
I would like it, only then i am afraid i will lock up this account also.

As long as you still know your forum profile's password, most forum software should enable you to set a new password without sending out a verification email. And if you change the email address connected to the forum profile, while they might send out a verification email to check that the new email address is valid, that would go to the new address you just submitted.

Hence, no need to create a new forum account from scratch just because your old email account has died on you (for whatever reason). 
Title: Re: Microsoft wont let me in my email anymore
Post by: Distelzombie on April 26, 2018, 11:23:31 pm
I dont need a smartphone, just email.




I made a new gmail acount with no problems.
Time to make all new forum profiles sooner or later.

They can hack my mail all they want, google can read all my mails no problem, as long as i can read the mail myself also.

You can obviously use it without a smartphone. You can even set it to require two normal passwords instead of just one.

It isn't as easy with these mailbox providers as you think. For example: Spam detection. Not of the mails in your in-box, but spam detection of your outgoing mail, in the in-box of your recipient.
Using this site https://www.mail-tester.com/ (https://www.mail-tester.com/) we can test if our outgoing mails would be detected as spam. (SpamAssassin) You just send a usual mail, with subject and body (Needs more than one word in both. What words to use is irrelevant) to that email shown there, press check-your-score and read the result.
The result shown on this website is identically to what the result of the SpamAssassin validation of a mailbox provider would be. (If they use SpamAssassin. But it's Open Source, so, who doesn't?) The result would be something like "6.7/10". The lower the score out of ten - the "spam"ier your mails look to spam filters.
(Usually called "X-Spam-Status: No/1.4/5.0" in the source code of a received email, where "5,0" is the threshold at which a mail is considered spam. The threshold varies with provider. "1.4" is the actual score of your mail and "no" means it is lower than the threshold.)
With this I could determine that my old email provider (GMX) produces outgoing emails that sometimes have a rating way into spam. It is even listed in SORBS! (that is a IPv4 blacklist)
With protonmail however, all emails always rate 10/10. Because they care about that. They also care about not reading your emails and archiving it for making profit via advertisement. (Encrypted inbox, p2p and keys) And it's free with no advertisements.

It also has a paid version with your own domains like bumfights@funny.vid. So you're not even stuck with bumfights@protonmail.com or bumfights@pm.me (Which you'll also get for free).
And you get a free 7 day trial of one of the, if not the best VPN service out there.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on May 03, 2018, 04:11:16 pm
It seems i cannot enter my new gmail account anymore also.
They say they need a phone number, while i dont have a phone for that.
Title: Re: Microsoft wont let me in my email anymore
Post by: Mr. Scram on May 03, 2018, 04:18:30 pm
It seems i cannot enter my new gmail account anymore also.
They say they need a phone number, while i dont have a phone for that.
These fuckers want you to use phone numbers for everything nowadays. They won't use it to link data to other data, pinky promise!
Title: Re: Microsoft wont let me in my email anymore
Post by: Jeroen3 on May 04, 2018, 10:15:44 am
You can use a landline with google.
Title: Re: Microsoft wont let me in my email anymore
Post by: JanJansen on May 04, 2018, 01:54:26 pm
I also could go to some website to have a american phone number for free, then get the text message to that number and read it on the site, it exists, only it cost a bit of time and im lazy.
Title: Re: Microsoft wont let me in my email anymore
Post by: IanB on May 04, 2018, 06:27:06 pm
I also could go to some website to have a american phone number for free, then get the text message to that number and read it on the site, it exists, only it cost a bit of time and im lazy.

But why would you need an American phone number? Google mail is available in Europe. You have access to no local phone number in your home? Is it even possible for anyone to not have a mobile phone these days?
Title: Re: Microsoft wont let me in my email anymore
Post by: bd139 on May 04, 2018, 06:36:25 pm
I don’t actually need a mobile phone.

You can activate gmail with a land line here. And AWS.

Really you can just get a prepaid credit card and buy a SIP/VoIP number for a week and use that if you want anonymity.

Or just use a different company! Lots of now questions asked ones out there.