 |
 |
Email hacking?
|
 |
|
 |
|
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status:
Offline
|
|
I have a feeling a ill meaning ex of mine has some how gotten my email password from on my computer, Is there any way using console or terminal or another utility that it could have been found and recovered? I want to figure this out so if it happens again, I will know how it might have happened.
Yes, I have since changed it.
Running 10.3.5
|
|
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
|
| |
|
|
|
 |
|
 |
|
Dedicated MacNNer
Join Date: Apr 2001
Location: The Moon
Status:
Offline
|
|
one way : the keychain - depending how you configured it ...
hope you don't wanna get a pw outta ya ex-friend 
|
|
.- OS X aDDICTED -.
|
| |
|
|
|
 |
|
 |
|
Mac Enthusiast
Join Date: Sep 2000
Location: Louisiana
Status:
Offline
|
|
Well if you use keychain to store your passwords, and she knew your password to your account, she could open keychain and get access to all passwords in your keychain.
|
|
B&W G3/300 OS X 10.3 Server
AL G4/1.5 OS X 10.3
Next computer G5/3.X Ghz OS X 10.x.x
|
| |
|
|
|
 |
|
 |
|
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status:
Offline
|
|
Nope, no key chain.
Hmm...strange.
|
|
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
|
| |
|
|
|
 |
|
 |
|
Senior User
Join Date: Jan 2001
Location: Mahwah, NJ USA
Status:
Offline
|
|
If they ever had admin rights then they could have grepped through your swapfile and possibly found the password.
Other possibility is... if they ever had admin rights they could have installed a keystroke logger. They might not need admin rights if they could ever get you to install or run some program while you were logged in as the admin user.
Other possibility is... if they ever had access to your LAN and your email is setup such that it does not use a secure (encrypted) login then they could sniff your password off of the network as it sailed by.
They may not need to have ever had admin rights or your password... if you ever used sudo and left them with console access to the system while still logged in within 5 minutes of using the sudo command.
Prior to (I think) Panther any user on your system could run 'nidump passwd .' and get a list of password hashes for later brute force cracking. The cracking could be done anywhere and they could take their time.
|
|
-DU-...etc...
|
| |
|
|
|
 |
|
 |
|
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status:
Offline
|
|
Yikes, that's really creepy stuff!!
I changed my password to a REALLY long one, quite complex but not hard to remember. I will also start using the keychain with a password.
|
|
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
|
| |
|
|
|
 |
|
 |
|
Mac Elite
Join Date: Sep 2000
Location: in front of the keyboard
Status:
Offline
|
|
If you have proof that she has logged in to your email account (like a log with an IP and a time) you should turn her in to the FBI and have her arrested for violation of the Patriot Act.
|
|
signatures are a waste of bandwidth
especially ones with political tripe in them.
|
| |
|
|
|
 |
 |
|
 |
|
|
|
|
|

|
|
 |
Forum Rules
|
 |
 |
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is Off
|
|
|
|
|
|
 |
 |
 |
 |
|
 |