Excellent method but make the tage refer to something hidden.

Or something that will intrigue.

a html file hidden somewhere. 

Or send a trojan and use it to take control of your targets machine.



-----Original Message-----
From: Laurence Brockman [mailto:[EMAIL PROTECTED]]
Sent: 29 April 2002 20:31
Cc: [EMAIL PROTECTED]
Subject: Re: Yahoo Account Security


Why don't you send an email message to your yahoo account with some embedded
html (or JavaScript?) in it (Such as a pic on your home server or
something).... or some friend that has apache running. Pick out a picture
that no one else will ever load, and wait for him to open the message. You
should get a line in the apache access logs with his source IP address...

Not sure if this would work, but it might be worth a shot.... anyone with
more experience with HTML email stuff think this would work?

Laurence

----- Original Message -----
From: "Sumit Dhar" <[EMAIL PROTECTED]>
To: "Tony Abedini" <[EMAIL PROTECTED]>
Cc: "H C" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, April 27, 2002 4:49 AM
Subject: re: Yahoo Account Security


> On Thu, 25 Apr 2002, Tony Abedini wrote:
>
> > Obviously if I changed my password, then I'd ruin the
> > chance of the person logging in again, so NO I haven't
> > change my password.
>
> The classic "hunted turning hunter" maneuver?? :)
>
> But if someone has your password, I would still assume the best thing to
> do would be to change it immediately. What happens if *he* changes it
> first? You would be probably locked out of your account and take my word
> for it, making a new ID and letting everyone know of it is not worth the
> pain. If the account is of no consequence, fine.. play on. But if it
> important, remember he has access to your documents and can cause
> problems if he gets nasty. :(
>
> If you really want to know who it is, use the data you already have.
> Will additional data really help?? Is Yahoo cooperating in this? I would
> have serious doubts about their giving you the IP etc.
>
> Just my $0.02 worth.
>
> <a href=http://dhar.homelinux.com/dhar/>Sumit Dhar</a>
> Manager, Business Development and Products,
> SLMsoft.com
>
>

Reply via email to