Live data from Hacker News

Skype vulnerability allowing hijacking of an account if you know just the email

pixus-ru.blogspot.ru

121–124 of 124 posts

Re: Skype vulnerability allowing hijacking of an account if you know just the email

#121
post #116

I'm genuinely curious- what's keeping people on Skype? There are better alternatives out there now (Google+ Hangouts, for example). Will this push any of you Skype users over?

Hangouts are very different use case from Skype. Skype is a messaging platform, g-hangout is a teleconference platform. They have intersecting, but not identical uses.

In my experience, the people that want me to use them have that exactly backwards.

Re: Skype vulnerability allowing hijacking of an account if you know just the email

#122
post #39

In August I received an email from Skype thanking me for registering an account. But I already had an account, I didn't register this one. After comparing the new account name with part of my email, I came to the conclusion that someone mistyped their email address, and registered an account on my address. I contacted their live support, here's the conversation: George A: Hello! Welcome to Skype Live Support! My name…

Turing test failure, or highly trained human? I'm not sure.

I suspect the support person may have been partly typing his responses and partly pasting prefab support snippets. Not sure though.

Re: Skype vulnerability allowing hijacking of an account if you know just the email

#123
post #68

Earlier quoted context omitted.

I do it, and have done it for a pretty long time. In the vast majority of cases, it's (almost) in the form of sitename@myemailaccount.com - which is usually pretty easy to remember. If someone was directly targeting me, and had my email address from another site, they could probably figure out what I'd used elsewhere. But if it's just a script running through email addresses harvested from site A, then mine will almo…

Nice way to find where spam comes from. Sadly this is at best a complicated workaround, that will will work for people that are motivated enough to remember for each different service a separate email and password and additionally to this you have to remember as well the credentials to manage your email address and check the emails from different sites. In my case it would mean having about 100 email addresses.

I suspect my total is way above 100. But you don't actually need to remember anything really. The @mydomain.com stays static and the email is basically the name of the site.

Re: Skype vulnerability allowing hijacking of an account if you know just the email

#124

Earlier quoted context omitted.

Because I don't want to sign up for Google+. I dislike the idea of bundling their social data mining solution with just about anything, like a less obvious and impossible to opt-out version of whatever-toolbar bundled with software years ago.

and you strangely believe microsoft isn't doing the same thing with skype's data?

They are way, way worse at it than Google. Which is good for me.
Post reply on HN