Ameritrade Spam Again - news.admin.net-abuse.email

Message from discussion Ameritrade Spam Again

Buss Error

More options Jul 31 2006, 3:25 pm

Newsgroups: news.admin.net-abuse.email

From: Buss Error <buss_er...@yahoo.com>

Date: Sun, 30 Jul 2006 22:25:00 -0500

Subject: Re: Ameritrade Spam Again

  Forward
  | Print
  | View thread
  | Show original
  | Report this message
  | Find messages by this author
  

On 28 Jul 2006 17:01:42 -0700, "Thomas" <tomwin...@gmail.com> wrote:

>I have decided to perform an experiment. I have just updated my
>ameritrade addresses to a set of 47 random characters, drawn from a
>38-character pool (a-z, 0-9, dash, and period). Based on how slow
>someone would have to check addresses to dictionary attack our server,
>it would take 10^68 YEARS to guess this new email address if you ran
>through every permutation.

Also consider that you might be transiting someone sniffing traffic
for email adresses between you and Ameritrade, if any of the traffic
is with the email address is enclear. Also consider that Ameritrade's
traffic is being sniffed by their upstream or a customer at their
upstream doing arp cache poisioning.

However, I agree, the most likely thing is Ameritrade has an insider
leaking their mailling lists, followed by a comprimised system within
Ameritrade itself.

There are man in the middle attacks that will work with SSL, if you
can get the browser to load a certificate.

Forward