Yep. Or open the *wrong* web site. Especially if you use the Windows/ 
Internet Explorer/Outlook combo. Nothing is 100% safe, but you can  
minimize your exposure by keeping your system up to date, yada, yada.

Loran
(insert your favorite Mac testimonial here)

On Oct 24, 2007, at 12:17 PM, BruceY wrote:

> Yikes!!! Someone please tell me that it can't be that easy!!
>
> Bruce
>> Bruce,  I had my eBay identity AND password hijacked recently and   
>> someone
>> used it to put a bunch of Mercedes, Jaguars and Rovers up on eBay  
>> for sale by
>> ......me!  I still haven't figured out how they would benefit  
>> from  this. But
>> I was told by eBay that you don't even have to click on the  links  
>> given on
>> the phishing site for them to find your password.  You just  have  
>> to OPEN a
>> phishing email for them to gain that information.  I  certainly  
>> don't understand
>> how they can do that.   I'm opening fewer  emails now!
>> ---Art Heller
From [email protected]  Wed Oct 24 15:34:32 2007
From: [email protected] (Steven Medved)
Date: Wed Oct 24 15:34:41 2007
Subject: [Phono-L] Record Price for Edison Army-Navy??
In-Reply-To: <[email protected]>
References: <[email protected]>
        <000b01c8164b$1dc66a40$6401a...@user52c8f93503> 
        <[email protected]>
Message-ID: <[email protected]>

The latest is the 'you have been chosen as a power seller'  I sell five things 
a year, if that so I suspected it.  The best thing to do is to go to my 
messages and if its not there send it to spoof at ebay or paypal dot com so 
they can investigate and shut down the sites and NEVER go to any account using 
any shortcut sent via your e-mail account unless you subscribe to the message 
you are getting.  
From [email protected]  Wed Oct 24 16:50:00 2007
From: [email protected] (Daniel Melvin)
Date: Wed Oct 24 16:59:12 2007
Subject: [Phono-L] Record Price for Edison Army-Navy??
References: <[email protected]>
Message-ID: <003d01c81698$98d14230$6501a...@danslaptop>

The previous post wasn't completely accurate, but there was some good 
advise. Change settings on any email reader to not show the content of the 
email unless you open it. All the issues mentioned below go away. Also, if 
you use Automatic Update with any operating system you have the likelyhood 
of such issues go way down as well. Caution is the the key. Don't open or 
respond to emails from anyone you don't know. Don't click on links in emails 
you don't trust. It's fairly simple.

Also, the ebay password is not on your computer in a cookie unless you say 
remember me on this computer. Something I never do on any computer for any 
password. That again is not unique to windows. The password is stored on 
your computer by the web page when you click on the remember me on this 
system part of the login page.

Dan
----- Original Message ----- 
From: "Rich" <[email protected]>
To: "Antique Phonograph List" <[email protected]>
Sent: Wednesday, October 24, 2007 2:53 PM
Subject: Re: [Phono-L] Record Price for Edison Army-Navy??


> If using Windows and either Microsoft email programs, Outlook or Outlook 
> Express, you need to be aware
> that Internet Explorer stores login information.  The email program will 
> run a script if you open or view,
> an email.  The script will go extract your login info and ship it off 
> through the internet.  see the linkage
> of the email and the browser?  That is the hole.  The script in question 
> is usually a .vbs routine
> embedded in an HTML formatted email.  Outlook / Outlook Express run the 
> ,vbs by default, you can turn
> this "feature" off.  Also turn off displaying HTML emails.
>
> This is how you loose your ID and Password and never filled in anything.
>
>
> On Wed, 24 Oct 2007 14:48:20 EDT, [email protected] wrote:
>
>>Bruce,  I had my eBay identity AND password hijacked recently and  someone
>>used it to put a bunch of Mercedes, Jaguars and Rovers up on eBay for 
>>sale by
>>......me!  I still haven't figured out how they would benefit from  this. 
>>But
>>I was told by eBay that you don't even have to click on the  links given 
>>on
>>the phishing site for them to find your password.  You just  have to OPEN 
>>a
>>phishing email for them to gain that information.  I  certainly don't 
>>understand
>>how they can do that.   I'm opening fewer  emails now!
>>---Art Heller
>
>
>
> _______________________________________________
> Phono-L mailing list
> http://phono-l.oldcrank.org 

Reply via email to