Orkut Updates - May make you crazy

[MythiliK]

Today morning when I checked my orkut account, I got shocked by seeing an update posted from my husband's account (update is like tweet posted in twitter, a short message which will get displayed in all your friend's page).

The message was like "Hey check out my sexy photos here: somexxxx.blogspot.com". The time it got posted was at 5 am our time. i.e when we were deep in sleep.

We thought the account was hacked, but then not. We were able to login. My husband immediately deleted those updates and wrote an apology update, asking friends not to open any link posted like this. Not sure, whether any virus caused this or any notorious person capable of posting update without opening the account (is that possible????) did it.

Anyways, friends if you have an orkut a/c, check it once in a while, even if you are not using it regularly. Otherwise, someone might have mis used your account. Worst thing is, it may spoil your image among your friends

[michaeldadona]

5 star for your discussion as it shares very useful information and seems Orkut has done nothing to prevent and protect their users' site from hackers' activities. It looks like nowadays every user got to has special software to go down to the root in detecting hackers, another business opportunity for those geeks in this area of software engineering expertise.

[karan]

Originally Posted by michaeldadona

5 star for your discussion as it shares very useful information and seems Orkut has done nothing to prevent and protect their users' site from hackers' activities. It looks like nowadays every user got to has special software to go down to the root in detecting hackers, another business opportunity for those geeks in this area of software engineering expertise.

Actually it's not hacker activity it's called phishing activity.When user click link and unknown page opened like your computer is infected,unknown search page open..
These type of link is can be found in forums,social networking site status and also these can be found in inbox also..

I was receive the some phishing emails like "Your paypal account is hacked,please report to us".

So these days such activity is rising and we have to be careful from it...

[michaeldadona]

Originally Posted by karan

Actually it's not hacker activity it's called phishing activity.When user click link and unknown page opened like your computer is infected,unknown search page open..So these days such activity is rising and we have to be careful from it...

The main thing now is Orkut must detect this kind of activity because this is computer thing. At least, there are steps taken because every point of entry there must be a sender terminal.

Myspace has solved this problem by giving notice once user account has been rammed by phishing activity. I received many times its notice with label "Phishing" and Tom explained very well what is phishing does means for. But the doer is a hacker.

Similarly at Facebook, I received many times asking me to change my account password. From this point, I used GFI software and not just to protect phishing done by hacker, it is also useful to protect virus sent by hacker and I can send back the virus to the root of source.

A hacker hacked your account at the first step and then they can start their phishing. That is the difference between a hacking and phishing. Before hacking the account, how do phishing activity can go through.

Karan, a hacker is a doer and phishing is a process of unethical breaking through others' account AND make use all of the functional features; done by hacker. The difference that readers must know.

Hacker
▼
Hacking
▼
Mythilik's husband account
▼
Phishing (processing)
▼
Recipients

What is phishing? here. Very clear there, it is a process not doer. A doer is a hacker.

[karan]

I am not saying hacker hacks account and send phishing mails and create a post.That was another method of phishing ..

I mix up both two types of phishing activity ..
Actually i was saying of these ..please read quote:

In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Even when using server authentication, it may require tremendous skill to detect that the website is fake. Phishing is an example of social engineering techniques used to fool users, and exploits the poor usability of current web security technologies Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures.

[michaeldadona]

Originally Posted by karan

I am not saying hacker hacks account and send phishing mails and create a post.That was another method of phishing ..

I mix up both two types of phishing activity ..
Actually i was saying of these ..please read quote:

Thanking you very much for the reply as well as I respect your promptly replied to my follow up comment post. Mythilik was telling about her husband's Orkut account has been used (hacked at this position) for phishing activity.

The main thing, Karan; our discussions are very useful to all readers.

[karan]

Originally Posted by michaeldadona

Mythilik was telling about her husband's Orkut account has been used (hacked at this position) for phishing activity.

Source of information like username and password can be provide by;
1)Orkut account leave without proper sign-out.
2)By sending phishing mail in gmail or any other email provider of password incorrect.

These two things i know which used to get username and password.

[michaeldadona]

Originally Posted by karan

Source of information like username and password can be provide by;
1)Orkut account leave without proper sign-out.
2)By sending phishing mail in gmail or any other email provider of password incorrect.

These two things i know which used to get username and password.

Another source, maybe Mythilik's husband has operated his Orkut account from other terminals e.g. office, friend, relative, etc.. Especially when the web browser used by Mythilik's husband is Mozilla Firefox in his office. Username and password are retrieval.

[karan]

Originally Posted by michaeldadona

Another source, maybe Mythilik's husband has operated his Orkut account from other terminals e.g. office, friend, relative, etc.. Especially when the web browser used by Mythilik's husband is Mozilla Firefox in his office. Username and password are retrieval.

Yeah it can be happen or is husband was in hurry not sign-out properly the orkut and some other user get info of username and passowrd..

[michaeldadona]

Originally Posted by karan

Yeah it can be happen or is husband was in hurry not sign-out properly the orkut and some other user get info of username and passowrd..

This is the thing we all need to know from Mythilik follow up comment for good sake to all readers. Hopes Mythilik get shares of knowledge from her husband to tell all of us on here.