paying the price for insecure passwords

servilan · 31 Oct 2005, 09:40 PM

I split up with a long-term girlfriend last week and over the weekend she managed to guess the password to my account @ftml.net and the hotmail account that was my 'backup' address. Then she changed the passwords.

I am left locked out of my own accounts, and because the backup's gone to there's no way to reset the fastmail password.

I've submitted a support request asking if there's another way of resetting the password. Does anyone know if this is possible, or how long it is likely to take to get a response?

Chipper · 31 Oct 2005, 11:15 PM

I don't know the answer regarding resetting the password.

Comment about this situation in general. (First, a disclaimer: I want to be very careful here not to violate Rule P.) You may want to check with a lawyer:
1) This sounds like hacking (definition: gaining unauthorized access to computer systems for the purpose of stealing and corrupting data).
2) This action is clearly malicious.
3) The third issue is: Is there a way you can prove that she is the one who did this? (The IP log would indicate where your account was logged in.)

Again, I want to tread very carefully here because of forum protocol. Therefore, I feel it prudent to not say any more.

servilan · 31 Oct 2005, 11:20 PM

It's her - she told me.

I hadn't thought of the legal side of this. While it is interesting, I am more insterested in getting my emails back. Hopefully someone on the support team will get around to helping me out soon.

JRobert · 1 Nov 2005, 05:52 AM

In such situations, I believe FM staff usually accept such a request if you can supply enough other details of the account to convince them that you are indeed the owner of it. Best to contact them directly.

-jeff-

servilan · 1 Nov 2005, 05:40 PM

How does one do that? My message submitted through the support system is yet elicit a reply.

Thanks.

JRobert · 1 Nov 2005, 08:29 PM

Was that via 'Immediately Submit a Support Request'? (You can get there from the Support link at the top of the login page). They're usually pretty good about responding to that. Kurian often reads/responds here as well, but the support-request is the official support route.

-jeff-

hadaso · 1 Nov 2005, 08:30 PM

Quote:

Originally posted by servilan
It's her - she told me.

So you are still speaking with each other...

servilan · 1 Nov 2005, 09:06 PM

Thanks jeff - that's what I did at around noon UK time yesterday

Quote:

So you are still speaking with each other...

I speak, she shouts.

trew · 1 Nov 2005, 09:08 PM

Here is my take on it. If she has done what you say, wouldn't she also love to eraze them as soon as possible so
you better write to FMmail now and giveenough info to let them keep her out and you in. Or else she gladly delete all of it.

To get them back from backup cost a lot of money.

JRobert · 1 Nov 2005, 09:12 PM

Quote:

Originally posted by servilan
Thanks jeff - that's what I did at around noon UK time yesterday

Ah, well - that's the best advice I have to offer. Best of luck with both issues...

-jeff-

trew · 1 Nov 2005, 09:26 PM

Do tell us if you succeeded could be important for next that it happens to?

snsh · 1 Nov 2005, 10:00 PM

send flowers

s a · 1 Nov 2005, 10:02 PM

Quote:

Originally posted by snsh
send flowers

...to fastmail (they also like chocolates I've heard)

servilan · 1 Nov 2005, 10:29 PM

I may have to send both. Just got an email from Kurian that will make it possible to sort out.

Thanks to all for comments. Remember what they say guys - hell hath no fury...so keep secure passwords.

DianeB · 4 Nov 2005, 01:18 AM

OT, but I can't help but make a comment here, considering the others.

Just the other night a dear friend of mine in the UK said something that hurt my feelings & he was apologizing profusely. I told him perhaps flowers, choc's, a cuddly teddy bear, a wee bit of gold, a few diamonds, *and* a fur coat, just might be the cure all. (greedy?? me?? never!! LOL)
Though in the past, he had already sent the first 3 on my list, so I had to come up with something new.

But on the serious side, this post should go to alert us all to *never* give out our passwords, no matter how much we may trust someone at the time.

~Diane

31 Oct 2005, 09:40 PM	#1
servilan Junior Member Join Date: Oct 2005 Posts: 5	paying the price for insecure passwords I split up with a long-term girlfriend last week and over the weekend she managed to guess the password to my account @ftml.net and the hotmail account that was my 'backup' address. Then she changed the passwords. I am left locked out of my own accounts, and because the backup's gone to there's no way to reset the fastmail password. I've submitted a support request asking if there's another way of resetting the password. Does anyone know if this is possible, or how long it is likely to take to get a response?

31 Oct 2005, 11:15 PM	#2
Chipper Master of the @ Join Date: Oct 2003 Location: Greenbelt, MD (USA) Posts: 1,278	I don't know the answer regarding resetting the password. Comment about this situation in general. (First, a disclaimer: I want to be very careful here not to violate Rule P.) You may want to check with a lawyer: 1) This sounds like hacking (definition: gaining unauthorized access to computer systems for the purpose of stealing and corrupting data). 2) This action is clearly malicious. 3) The third issue is: Is there a way you can prove that she is the one who did this? (The IP log would indicate where your account was logged in.) Again, I want to tread very carefully here because of forum protocol. Therefore, I feel it prudent to not say any more.

31 Oct 2005, 11:20 PM	#3
servilan Junior Member Join Date: Oct 2005 Posts: 5	It's her - she told me. I hadn't thought of the legal side of this. While it is interesting, I am more insterested in getting my emails back. Hopefully someone on the support team will get around to helping me out soon.

1 Nov 2005, 05:52 AM	#4
JRobert Master of the @ Join Date: Feb 2004 Location: New Hampshire, USA Posts: 1,561	In such situations, I believe FM staff usually accept such a request if you can supply enough other details of the account to convince them that you are indeed the owner of it. Best to contact them directly. -jeff-

1 Nov 2005, 05:40 PM	#5
servilan Junior Member Join Date: Oct 2005 Posts: 5	How does one do that? My message submitted through the support system is yet elicit a reply. Thanks.

1 Nov 2005, 08:29 PM	#6
JRobert Master of the @ Join Date: Feb 2004 Location: New Hampshire, USA Posts: 1,561	Was that via 'Immediately Submit a Support Request'? (You can get there from the Support link at the top of the login page). They're usually pretty good about responding to that. Kurian often reads/responds here as well, but the support-request is the official support route. -jeff-

1 Nov 2005, 09:08 PM	#9
trew Cornerstone of the Community Join Date: Dec 2004 Location: Sweden Posts: 836	Here is my take on it. If she has done what you say, wouldn't she also love to eraze them as soon as possible so you better write to FMmail now and giveenough info to let them keep her out and you in. Or else she gladly delete all of it. To get them back from backup cost a lot of money.

1 Nov 2005, 09:26 PM	#11
trew Cornerstone of the Community Join Date: Dec 2004 Location: Sweden Posts: 836	Do tell us if you succeeded could be important for next that it happens to?

1 Nov 2005, 10:00 PM	#12
snsh Cornerstone of the Community Join Date: Dec 2002 Location: Boston Posts: 611	send flowers

1 Nov 2005, 10:29 PM	#14
servilan Junior Member Join Date: Oct 2005 Posts: 5	I may have to send both. Just got an email from Kurian that will make it possible to sort out. Thanks to all for comments. Remember what they say guys - hell hath no fury...so keep secure passwords.

4 Nov 2005, 01:18 AM	#15
DianeB Cornerstone of the Community Join Date: Nov 2003 Location: USA-South Carolina Posts: 503	OT, but I can't help but make a comment here, considering the others. Just the other night a dear friend of mine in the UK said something that hurt my feelings & he was apologizing profusely. I told him perhaps flowers, choc's, a cuddly teddy bear, a wee bit of gold, a few diamonds, and a fur coat, just might be the cure all. (greedy?? me?? never!! LOL) Though in the past, he had already sent the first 3 on my list, so I had to come up with something new. But on the serious side, this post should go to alert us all to never give out our passwords, no matter how much we may trust someone at the time. ~Diane