umm, what the hell is this?

ric1287

Diamond Member
Nov 29, 2005
4,845
0
0
I went to bestbuy.com today, and someone else was logged into the account. I have this guys email address now. I am using wireless, but have WEP and now MAC filtering. How did this happen? Should i be worried about anything else on my computer?
 

bob4432

Lifer
Sep 6, 2003
11,726
45
91
Originally posted by: ric1287
I went to bestbuy.com today, and someone else was logged into the account. I have this guys email address now. I am using wireless, but have WEP and now MAC filtering. How did this happen? Should i be worried about anything else on my computer?

can you switch to wpa? are you sure this person couldn't have gotten the info any way else?
 

ric1287

Diamond Member
Nov 29, 2005
4,845
0
0
for some reason (at least on my other laptop) WPA slowed my already crappy DSL connection to a crawl. I have no idea how this would even be possilble since the cookie file would be on my hard drive. And nobody but me has used this laptop. No idea.
 

stardrek

Senior member
Jan 25, 2006
264
0
0
To be honest, there are so many way for this to happen that I doubt anyone could tell you definitively what was the root cause of someone getting into your account.


  1. 1) Both WEP and WPA are fairly easy to break. So if you are going to do any online transactions that use your credit card info or other sensitive info, use a wired connection.

    2) Have a firewall running on your system, at the very minimum you should be using the built in windows firewall. But products such as Zone Alarm are great, and can be had for free for personal use.

    3) Make sure you have antivirus and anti-spyware software on your system. If you don?t have any antivirus software, buy some. Anti-spyware can be gotten for free from LavaSoft or other fine vendors, for free.

    4) Always log out of an account when you are finished with it. Don?t just close the window because it doesn?t close the cookie session. Cookie sessions are some of the things that lots of spyware goes for to get user accounts and passwords.

    5) Always be sure to lock your computer, to prevent any physical access to the system.


Hope this doesn?t happen again.

Best of luck
 

ric1287

Diamond Member
Nov 29, 2005
4,845
0
0
no, he didn't get access to my account. He logged into HIS account, and it said "Welcome back Eddy" on the bestbuy homepage. Now even if he had my connection, theres no way that would show up on my computer is there?
 

aphex

Moderator<br>All Things Apple
Moderator
Jul 19, 2001
38,572
2
91
ya know, my school network does this all the time... especially with sites like yahoo.com and the like...

Even to the point i can see other peoples e-mail.
 

ric1287

Diamond Member
Nov 29, 2005
4,845
0
0
Originally posted by: aphex
ya know, my school network does this all the time... especially with sites like yahoo.com and the like...

Even to the point i can see other peoples e-mail.

yeah i have the guys email. Should i send him a message?
 

bob4432

Lifer
Sep 6, 2003
11,726
45
91
Originally posted by: ric1287
Originally posted by: aphex
ya know, my school network does this all the time... especially with sites like yahoo.com and the like...

Even to the point i can see other peoples e-mail.

yeah i have the guys email. Should i send him a message?

sounds more like a session not logged out of and just a brower shut down or maybe your browser is setup to save usernames and passwords automatically.

why are you freaked out? and the answer to your question of "how did this happen" from your original post - you let a person use your machine and they logged into best buys website and your computer kept the info...where is there a breach? if antything he should be worried.

this has nothing to do with wired/wireless security, just how your brower is set up to keep data.

 

niggles

Senior member
Jan 10, 2002
797
0
0
Originally posted by: stardrek



  1. 1) Both WEP and WPA are fairly easy to break. So if you are going to do any online transactions that use your credit card info or other sensitive info, use a wired connection.


  1. Seriously? Since when? I mean as long as you don't use real words or short entries I didn't think it was crackable. keep your key at around 20 characters and who's going to get in?
 

w00t

Diamond Member
Nov 5, 2004
5,545
0
0
Originally posted by: niggles
Originally posted by: stardrek



  1. 1) Both WEP and WPA are fairly easy to break. So if you are going to do any online transactions that use your credit card info or other sensitive info, use a wired connection.


  1. Seriously? Since when? I mean as long as you don't use real words or short entries I didn't think it was crackable. keep your key at around 20 characters and who's going to get in?



  1. anything is crackable maybe not as easy as this guy makes it sound but there is programs that will crack them for you. I think knoppixs STD had it off the top of my head I belief it was called netstumbler.
 

niggles

Senior member
Jan 10, 2002
797
0
0
fair enough anything is crackable, but it would take an insane amount of time to come up with all the permutations for a 20 character key that had no dictionary reference wouldn't it? I can't see anyone spending the time for a residence... we're talking months with a single PC.
 

DAPUNISHER

Super Moderator CPU Forum Mod and Elite Member
Super Moderator
Aug 22, 2001
31,757
31,734
146
Originally posted by: niggles
fair enough anything is crackable, but it would take an insane amount of time to come up with all the permutations for a 20 character key that had no dictionary reference wouldn't it? I can't see anyone spending the time for a residence... we're talking months with a single PC.
All you need is the right packet sniffers.
 

yacoub

Golden Member
May 24, 2005
1,991
14
81
Originally posted by: ric1287
I went to bestbuy.com today, and someone else was logged into the account. I have this guys email address now. I am using wireless, but have WEP and now MAC filtering.

So you didn't have MAC filtering before? Just wep, eh? Coulda been broken pretty easily.

 

stardrek

Senior member
Jan 25, 2006
264
0
0
Originally posted by: niggles
Originally posted by: stardrek



  1. 1) Both WEP and WPA are fairly easy to break. So if you are going to do any online transactions that use your credit card info or other sensitive info, use a wired connection.


  1. Seriously? Since when? I mean as long as you don't use real words or short entries I didn't think it was crackable. keep your key at around 20 characters and who's going to get in?


  1. Cracking WEP takes about a half hour to a few hours: Removed link, PM me tutorial...

    Cracking WPA take less then 10, even with GREAT passwords: Removed link, PM me tutorial...

    Personally I like this distro to do it: http://www.remote-exploit.org/index.php/Main_Page