<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hi...<div><br></div><div>I doubt it was the password that was the problem... it was probably because I clicked on the link... it was an ad for some type of weight loss product (probably not FDA approved). Then to make it worse, I replied back to the neighbor it appeared to be from, telling her it looked like she had been hacked. If all I had done was open the email and closed it without doing anything else, it probably would have been ok. At first I had thought the email might be something about our homeowners association... that's why I opened it. Live and learn!</div><div><br></div><div>I have a new password now and will take steps to switch to a new email provider.</div><div><br></div><div>Caryl<br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Mon, 18 Jun 2012 15:22:07 +1000<br>> From: quozl@laptop.org<br>> To: support-gang@lists.laptop.org<br>> CC: bigenhoc@greenhill.org; wkayers@hotmail.com; olpc-socal@laptop.org; mlbss@hampshire.edu<br>> Subject: Re: [Olpc-socal] [support-gang] Caryl's Been Hacked. Don't open any messages from her unless the subject is something you know is from her! Maybe me too!<br>> <br>> On Mon, Jun 18, 2012 at 12:21:00AM -0400, Kevin Mark wrote:<br>> > On Sun, Jun 17, 2012 at 01:16:54PM -0700, Edward Bigenho wrote:<br>> > Yup, the first clue with 'no subject' and the content was too short ;)<br>> > time for a longer password :)<br>> <br>> If you are suggesting that the intrusion was due to a short password,<br>> I think not.<br>> <br>> The pattern of spread for this intrusion has been clicking on a link<br>> in mail, being prompted for your password, and typing it in without<br>> realising that you are actually talking to a third-party web site, and<br>> not the service you intended to log in to. The password is then<br>> captured and abused.<br>> <br>> A longer password does not do anything for that. I advise against<br>> choosing a longer password without knowing for sure that it was the<br>> shortness of the password that contributed to the problem.<br>> <br>> Instead, check that what you are typing your password into ... is the<br>> site that deserves to be given it. Looking at the web browser page is<br>> not enough, one should also look carefully at the location, or URL.<br>> <br>> -- <br>> James Cameron<br>> http://quozl.linux.org.au/<br>> _______________________________________________<br>> OLPC-SoCal mailing list<br>> OLPC-SoCal@lists.laptop.org<br>> http://lists.laptop.org/listinfo/olpc-socal<br></div></div> </div></body>
</html>