I wholeheartedly agree Paul. I will check out the license agreements of Hotmail and see what can be done there. I will advise my customer to contact Hotmail and see what cab be done there.
The relationship with the former employee is very troubled. Getting the password back from her is pretty much impossible. Threatening with a lawsuit might be needed and the only way to a solution. But to answer your question, Paul. What procedure would you have in mind to reclaim access to an on line service (mail, website, ...)? I imagine that a written proof of ownership is at least needed. Bert On 12/07/2011 15:06, Paul Asadoorian wrote: > I believe this sets a really bad precedent. I've seen similar cases like > this in the past, and we all come to the same conclusion that there just > may be no way to recover your email account. (Unless you steal a high > profile person's email account, like Sarah Palin). > > This means, if someone can guess you email account password or security > question answers, they can access your email and change the password to > lock you out. This can't be the case, can it? Its essentially saying > that someone can break into your house/shed/car, change the locks, and > then its not yours anymore. > > There has to be some path to re-claim your email account, via the ISP, > law enforcement, and the service provider... > > Cheers, > Paul > > On 7/12/11 8:29 AM, Aaron Melton wrote: >> Bert, >> >> Good advice: Don't make a point, make a difference. :) >> >> Aaron >> >> On 7/12/11 3:01 AM, Bert Van Kets wrote: >>> Thanks for the information guy. >>> Looks like my customer is pretty much out of luck. She had already >>> tried to guess the password and go through the reset password >>> process. No luck there. She also has gone to the police to file a >>> complaint. >>> I'll break the news gently and inform her she's been pretty stupid >>> and has to bear the consequences. >>> Bert >>> On 11/07/2011 22:04, Brian Erdelyi wrote: >>>> I'm not going to lecturer about using hotmail accounts for >>>> business. >>>> >>>> 1. Contact the employee for the password. Report it to the police >>>> if necessary. 2. Visit hotmail.com and try to reset the password. >>>> If the company doesn't have enough information to reset the >>>> password you'll have to report it to Microsoft. >>>> >>>> Your customer is not in a position to authorize you to hack >>>> Microsoft's servers. I would not recommend you do this. Your >>>> customer does not own the servers you propose to hack. >>>> >>>> Worst case, your customer needs to create a new email address. >>>> Consider it a lesson learned and have them register their own >>>> Internet domain. >>>> >>>> .b >>>> >>>> On 2011-07-11, at 7:44 AM, Bert Van Kets <[email protected]> >>>> wrote: >>>> >>>>> Hi guys, >>>>> >>>>> a customer of mine, who runs a shop, just dismissed an employee. >>>>> Just before leaving, the employee changed the password of the >>>>> hotmail e-mail address used by the shop. The owner of the shop >>>>> asked me to retrieve the password or at least to make sure the >>>>> e-mail address is rendered inoperable. >>>>> >>>>> The e-mail address contains the name of the shop and not a >>>>> person's name. It is clearly to be used by the shop. The request >>>>> to recover the password comes from the legal owner of the shop. >>>>> >>>>> As I'm very new in the InfoSec world I'd like to get advise from >>>>> the experts (yeah, that you lot). - Where can I get a template >>>>> for a document I can have the customer sign to allow me to hack >>>>> the hotmail address? - What is the best way to recover the >>>>> hotmail e-mail password? - Is there a way to render the e-mail >>>>> address inoperable? - Any other advise? >>>>> >>>>> Thanks. >>>>> >>>>> Bert _______________________________________________ Pauldotcom >>>>> mailing list [email protected] >>>>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >>>>> Main Web Site: http://pauldotcom.com >>>> _______________________________________________ Pauldotcom mailing >>>> list [email protected] >>>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main >>>> Web Site: http://pauldotcom.com >>>> >>> _______________________________________________ Pauldotcom mailing >>> list [email protected] >>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main >>> Web Site: http://pauldotcom.com > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
