From: lyger (lyger@attrition.org)
To: Sophsastar2@aol.com
Cc: jericho@attrition.org
Date: Mon, 29 May 2006 18:12:32 -0400 (EDT)
Subject: Re: Account hacked.


On Mon, 29 May 2006, Sophsastar2@aol.com wrote:

": " I have recently had my account hacked. My password has been changed and my
": " secret question is now in Turkish. I hear there are ways to get it up and
": " running again. I have very important and private emails in my account. Please
": " help.
": "
": " Sophie.

Hi, Sophie..

There are probably a number of ways to get it up.  So we can start with
that process, we assume you're the actual account holder, over the age of
19, and a U.S. citizen?  If you have any way to verify our assumptions,
please send them on.

Lyger

From: lyger (lyger@attrition.org)
To: Sophsastar2@aol.com
Bcc: security curmudgeon (jericho@attrition.org)
Date: Tue, 30 May 2006 17:15:41 -0400 (EDT)
Subject: Re: Account hacked.


On Tue, 30 May 2006, Sophsastar2@aol.com wrote:

": " Yes, how would you like me to verify it?

Well, we have been known to ask for photo verification in some cases, but
the person making the request could just as easily send a phony picture,
so that's out.  Let's try a few trivia questions to which an adult U.S.
citizen would know the answers?

1.  What was the nickname of Henry Winkler's character in his most famous
television role?

2.  What was General Grant's (Civil War era, later a President) first name?

3.  At what Colorado high school did a shooting take place in 1999?

4.  What company makes the breakfast cereal "Rice Krispies"?

5.  What 80's pop icon released the single "Like A Virgin?"?

6.  Name the cute fuzzy red puppet on Sesame Street that once had a
"Tickle Me" doll.

Not a perfect system, but we can at least tell relative age and cultural
experiences by your answers.