Announcement
Collapse
No announcement yet.
Dang hackers
Collapse
X
-
Originally posted by Davoh View PostAll access to a website is logged on the server hosting the website. Further, all authentication attempts are logged, whether successful or failed. plus... it's google... google knows everything. In these logs, is the numerical address(IP Address) that the connection came from. Finding out the area/region it came from is as simple as googling that IP... since they are google... well... you get the idea...
Very good question here. If it is a legitimate email, the from address will be a no-reply type address, and the body of the address will tell you specifically not to reply. I've gotten emails like this from GMail several times. No-one's cracked my email password. Even "associates" who've tried.Then again, my password is far longer than 15 characters, and includes Capital, lowercase, numerical, and special characters. I've run all the common brute force systems against it on my own network with all protections down. Even after weeks of 20+attempts per second(which will trigger protections on systems like gmail), it was still running.
No password itself is "uncrackable". The key is to only use systems that dont allow brute force attacks. Repeated attempts to "guess" the password using all possible strings of characters. All lowercase alphabetic passwords can be cracked in seconds. Even if they're 20 digits long. The inclusion of all types of characters increases the number of combinations exponentially for each character type you use, per each character in the password.
26 + 26 + 10 + 32 = 94
94 possible characters for each digit, with 12 digits
94^12
475,920,314,814,253,376,475,136 different combinations of characters to make up that password
Adding one more digit:
94^13
44,736,509,592,539,817,388,662,784
Thats 44,260,589,277,725,564,012,187,648 more different combinations than 12 digits... I actually had to look up the word for a number with that many digits... wow...
This is why anything 12 characters or longer with all those types of characters, is safe on any system where the admins implement brute force protection.
sorry for the ramble... i get carried away on stuff like this...
Comment
-
Originally posted by Davoh View Postdoubtful that it was an actual human... probably a bruteforce attack script trying a mailing list of email accounts...
yeah... netsec is part of what i do... and not all hackers are "retards"... some of us do it for the right reasons... we're called whitehats for a reason...
Comment
-
Originally posted by Bill in San Jose View PostHow could they know they were from the Dominican Republic?
Did the email from Google ask you for ANY information about yourself, or have an attachment you opened?
It almost sounds like a phishing email to you. If you still have the Google email, hit Reply and then look at the address it's going to be sent to. Post the email address here.
Plus your password, bank account number, social security number and bank account password
Comment
Comment