Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Email hacking?

Email hacking?
Thread Tools
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status: Offline
Reply With Quote
Sep 20, 2004, 04:47 PM
 
I have a feeling a ill meaning ex of mine has some how gotten my email password from on my computer, Is there any way using console or terminal or another utility that it could have been found and recovered? I want to figure this out so if it happens again, I will know how it might have happened.

Yes, I have since changed it.

Running 10.3.5
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
     
Dedicated MacNNer
Join Date: Apr 2001
Location: The Moon
Status: Offline
Reply With Quote
Sep 20, 2004, 04:58 PM
 
one way : the keychain - depending how you configured it ...

hope you don't wanna get a pw outta ya ex-friend
.- OS X aDDICTED -.
     
Mac Enthusiast
Join Date: Sep 2000
Location: Louisiana
Status: Offline
Reply With Quote
Sep 20, 2004, 04:59 PM
 
Well if you use keychain to store your passwords, and she knew your password to your account, she could open keychain and get access to all passwords in your keychain.
B&W G3/300 OS X 10.3 Server
AL G4/1.5 OS X 10.3
Next computer G5/3.X Ghz OS X 10.x.x
     
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status: Offline
Reply With Quote
Sep 20, 2004, 05:09 PM
 
Nope, no key chain.

Hmm...strange.
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
     
Senior User
Join Date: Jan 2001
Location: Mahwah, NJ USA
Status: Offline
Reply With Quote
Sep 20, 2004, 06:29 PM
 
If they ever had admin rights then they could have grepped through your swapfile and possibly found the password.

Other possibility is... if they ever had admin rights they could have installed a keystroke logger. They might not need admin rights if they could ever get you to install or run some program while you were logged in as the admin user.

Other possibility is... if they ever had access to your LAN and your email is setup such that it does not use a secure (encrypted) login then they could sniff your password off of the network as it sailed by.

They may not need to have ever had admin rights or your password... if you ever used sudo and left them with console access to the system while still logged in within 5 minutes of using the sudo command.

Prior to (I think) Panther any user on your system could run 'nidump passwd .' and get a list of password hashes for later brute force cracking. The cracking could be done anywhere and they could take their time.
-DU-...etc...
     
Mac Enthusiast
Join Date: Dec 2002
Location: Here
Status: Offline
Reply With Quote
Sep 20, 2004, 09:40 PM
 
Yikes, that's really creepy stuff!!

I changed my password to a REALLY long one, quite complex but not hard to remember. I will also start using the keychain with a password.
"I'll take a extra layer of ram on that
gigaflop sandwich mister"
     
Mac Elite
Join Date: Sep 2000
Location: in front of the keyboard
Status: Offline
Reply With Quote
Sep 21, 2004, 12:18 AM
 
If you have proof that she has logged in to your email account (like a log with an IP and a time) you should turn her in to the FBI and have her arrested for violation of the Patriot Act.
signatures are a waste of bandwidth
especially ones with political tripe in them.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 04:42 AM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2