Hacked?

[bigbirddog]

At the suggestion of the KC moderator, I am republishing this note here:

I have an email account that I only use for this board and hobbying. I use a different screen name on that account than I use here and I do not have my eccie mail forwarded to that account or notifications sent to it from eccie.

Today, I got two messages from "providers" who used my eccie handle and sent the email directly to my "other" account. This is serious as notifications on that other account display on the screen of my computer.

The only way that I can figure that this happened is that someone got into the eccie database (I always use "in private" to communicate here) though it is possible, I guess, that somehow my computer has been hacked, though I doubt it.

Has anyone else had this happen?

[yardape]

Look at your header info. Or you might have given your pvt e-mail address to a provider and she gave it to another. I don't think you can assume security in anything that gets forwarded, redirected, bounced around among e-mail servers.

[GneissGuy]

Originally Posted by bigbirddog

At the suggestion of the KC moderator, I am republishing this note here:

I have an email account that I only use for this board and hobbying. I use a different screen name on that account than I use here and I do not have my eccie mail forwarded to that account or notifications sent to it from eccie.

Today, I got two messages from "providers" who used my eccie handle and sent the email directly to my "other" account. This is serious as notifications on that other account display on the screen of my computer.

The only way that I can figure that this happened is that someone got into the eccie database (I always use "in private" to communicate here) though it is possible, I guess, that somehow my computer has been hacked, though I doubt it.

Has anyone else had this happen?

I'm a little confused by your description and exactly what happened on each account.

Let's call them:

Account 1 (A1) : The account you're not worried about.
Account 2 (A2) : The one that was "compromised." The one you're worried about. The "other" account in your post.

Can you tell us:

Which one is in the ECCIE database?
Which one you use to communicate to providers or hobbyists using "bigbirddog?"
What hobby related activities you use each one for?
Are the two providers ones you've had contact with, or simply "spammers?"
Who knows that A2 = bigbirddog?

I'm not on the staff here, but I do deal with a lot of "information leakage" problems in my line of work.

[thx]

Yes, please describe clearly (using fakenames is name) to describe what you saw. It almost sounds like you have the 'other' email address listed on eccie, and the providers sent you a personal email. (which most boards allow you to do)

[bigbirddog]

Originally Posted by GneissGuy

I'm a little confused by your description and exactly what happened on each account.

Let's call them:

Account 1 (A1) : The account you're not worried about.
Account 2 (A2) : The one that was "compromised." The one you're worried about. The "other" account in your post.

Can you tell us:

Which one is in the ECCIE database?
Which one you use to communicate to providers or hobbyists using "bigbirddog?"
What hobby related activities you use each one for?
Are the two providers ones you've had contact with, or simply "spammers?"
Who knows that A2 = bigbirddog?

I'm not on the staff here, but I do deal with a lot of "information leakage" problems in my line of work.

A2 was compromised

A2 is in the ECCIE database

I use my ECCIE handle and pm to communicate with providers

I sometimes use A2 to communicate with providers not on ECCIE. However, the "handle" on A2 is NOT the same as my ECCIE handle so there would be no reason for anyone to send a message to me on A2 using my ECCIE handle

A1 is never used to hobby in any fashion

This could not have been "spam" because it used the ECCIE handle in a message sent to A2, where the handle is different

No one should know that the A2 handle = bigbirddog

[GneissGuy]

Some thoughts:

Is the "allow vCard download" turned off on this page?

http://www.eccie.net/profile.php?do=editoptions

Are you on any "social" lists? Does ANYONE know birddog=a2?

I wonder if there's any way eccie "leaks" this info, for instance, if a you PM someone and they have e-mail notification of PMs turned on, do they get your e-mail? I know on ASPD, if you sent someone an e-mail instead of a PM on the system, they would get your e-mail address?

By the way, how do you send an e-mail (not a PM) to another member on eccie? I see an option to permit people to send you e-mail, but no way to send an e-mail to others.

For that matter, is there a way to get eccie to e-mail you if you receive a PM?

[GneissGuy]

...testing...

[bigbirddog]

Originally Posted by GneissGuy

Some thoughts:

Is the "allow vCard download" turned off on this page?

http://www.eccie.net/profile.php?do=editoptions

Are you on any "social" lists? Does ANYONE know birddog=a2?

I wonder if there's any way eccie "leaks" this info, for instance, if a you PM someone and they have e-mail notification of PMs turned on, do they get your e-mail? I know on ASPD, if you sent someone an e-mail instead of a PM on the system, they would get your e-mail address?

By the way, how do you send an e-mail (not a PM) to another member on eccie? I see an option to permit people to send you e-mail, but no way to send an e-mail to others.

For that matter, is there a way to get eccie to e-mail you if you receive a PM?

There is no vcard to download. I am not on any social lists and there should be no way for anyone to know that bigbirddog = a2.

I checked the deleted messages and they initiated from Russia. So, there is some hacking of something.

[jr4u]

I had some strange stuff happen to my computer a couple of weeks ago. Anybody ever been hacked through yahoo messenger?