Re: Hotmail message view exploit

From: Jome (jomeat_private)
Date: Sun Aug 19 2001 - 10:36:37 PDT

Next message: Alex Prestin: "Re: HTML email "bug", of sorts."

Previous message: Daryl Banttari: "Re: HTML email "bug", of sorts."
In reply to: [Digital-Vortex]@securityfocus.com: "Hotmail message view exploit"
Next in thread: Scott Gifford: "Re: Hotmail message view exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> It also helps to know that from the message numbers,
> in you own hotmail inbox,you can see about what time
> is what message number been used. eg:
> 
> MSG997936971.27 arrived on 16.08.2001.
> MSG996698372.27 arrived on 01.08.2001.
> MSG975960863.0  arrived on 04.12.2000.

The numbers after MSG and before the dot (i.e. 997936971, 996698372 and 975960863) is a UNIX timestamp which means, if I've understood this correctly, that you have to know exactly when a message has arrived. I dont't know about the number after the dot, but it may be the number of the message received at that exact second.

Even if you have a scanner, wouldn't it be thousands of messages to scan even if you knew which minute a message has arrived?

 - Jome

Next message: Alex Prestin: "Re: HTML email "bug", of sorts."
Previous message: Daryl Banttari: "Re: HTML email "bug", of sorts."
In reply to: [Digital-Vortex]@securityfocus.com: "Hotmail message view exploit"
Next in thread: Scott Gifford: "Re: Hotmail message view exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Aug 19 2001 - 16:47:28 PDT