21–26 of 26 posts
Earlier quoted context omitted.
I tried Keychain Viewer package from a 3rd party repo on Cydia. It didn't get the Yahoo password unfortunately. If you know of any specific packages to try, please let me know. I got so angry when she said 'I will not give you my name. There is no manager here. Goodbye' that I threw my iPhone at the wall and shattered it to pieces. Now I'm also out $400. I really hate Yahoo .. :-/
Well that was a bit silly.
Earlier quoted context omitted.
> Though documents can be forged, there have to be other methods to get your rightful account back if you are indeed the owner and there's something messed up with the secret questions. No there doesn't. Yahoo has no way of knowing that you are actually the owner. Nor are they obligated to go out of the way to verify ownership (which would pretty much require in-person verification, and be expensive, and even then th…
Just because social engineering exists, doesn't mean we should have to forfeit our online accounts because businesses can't support the costs of verification in extreme circumstances. I find your stance arcane.
There are ways to extract passwords from iOS backups, that might be a way to go? I believe the entire keychain could be accessed.
Earlier quoted context omitted.
That's what I did when the same happened to me. Enable iCloud Keychain on the iPad and the Mac, wait for the passwords to sync (might take a few minutes) and then open Keychain Access on the Mac and find the password on it.
This did not work because the Yahoo password is not stored on the device after being entered. Apparently Yahoo has something called XYMCOOKIE authentication for SMTP and IMAP which is basically just acceptance of a pre-sent hash/cookie. The iPad discards the actual password the first time you enter it and instead stores a XYMCOOKIE. See here: https://www.google.com/search?q=XYMCOOKIE+authentication
This is exactly the conversation I have with clients in this sort of situation: "You shouldn't be using Yahoo, or any other free email service, for your business email. Even if we could solve this problem now, you're going to have another problem later on. We need to set you up with a proper, professional email address, you will have to send out a short update to your contacts announcing the new email address, you'll have to update your website and any other business materials, and for a while, you'll have to forward all of your Yahoo mail to your new email address.
I know this sounds expensive and sounds like a lot to have to do right now, and it is, but I don't provide Yahoo support for free, and you're better off getting this fixed now rather than putting it off and having to do it another day anyway. I'll be happy to help you with all of this."
If somebody, whether family or client or otherwise, uses Yahoo or Gmail or Hotmail (or outlook.com or whatever the heck it is now), I'll make one good faith attempt to resolve their trouble, and then after that I simply don't care anymore. They're using a stupid service, and that's their problem, not mine, and I'm not going to grow another gray hair over it.
Earlier quoted context omitted.
Just because social engineering exists, doesn't mean we should have to forfeit our online accounts because businesses can't support the costs of verification in extreme circumstances. I find your stance arcane.
So you are suggesting businesses should go bankrupt instead of telling you are SoL?