Security Basics mailing list archives

Re: How to obtain a yahoo username off a computer


From: chort <chort () amaunetsgothique com>
Date: Wed, 11 Jun 2003 16:39:52 -0700 (PDT)

The easiest way I can think of would be to sniff the network traffic
originating from that IP on your internal network.  You could restrict
you sniffing to only packets bound for port 80, 110, 25, etc depending
on how the Yahoo! account is being used.  If you could covertly place
their ethernet connection into a hub, you could plug a laptop with
Ethereal or a similar sniffer into the same hub and watch their traffic.
You can also do the same thing on most switches with what I believe is
commonly called a "spanning" port (a switch port that sees all traffic).

As long as the connection to Yahoo! is not using encryption, you'll get
everything you need and more.  If they're using an encrypted connection,
then you'll need to resort to some means on the workstation itself.

-- 
-chort

On Wed, 11 Jun 2003, Potter, Tim wrote:

Hello!  We have a security issue and need to know who is using a
particular Yahoo user ID from within our company.  We are about 90%
certain of the person's identity.  This user has been deleting his
cookies and temp Internet files.  We want to search his computer to see
if Yahoo ID xxxx is somewhere on his computer.   We know the Yahoo user
ID - we just need to confirm that this person is using it.  We don't
want to contact Yahoo because we don't want to go down the legal road
needed to get them to release the info.  Any ideas?
Thanks,
-Tim

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: