The word virus gets thrown around a lot but...

[Infrared]

3) Network (most likely): If your friend's network is wireless and not protected, you can't imagine how easy it is for someone to get such information (granted he knows what he's doing). Having an unprotected wireless network means that someone can connect to it, then sniff the data that are transmitted in it, and because its not protected, those data are not encrypted.

Sort of. Sometimes the communication between your web browser and
the web server is encrypted by the browser itself. Sniffing that traffic
won't reveal much.

The hotmail login page, for example, has a "Use advanced security" option
that takes you to a login page where encryption is used. I can't see
a similar option for facebook, though.

 

[MacBoobsPro]

Sort of. Sometimes the communication between your web browser and
the web server is encrypted by the browser itself. Sniffing that traffic
won't reveal much.

The hotmail login page, for example, has a "Use advanced security" option
that takes you to a login page where encryption is used. I can't see
a similar option for facebook, though.

Everything was secure its just that she must of gone snooping and found his 'little black book' that contains important stuff. Still not sure how she got his new email address though when it wasnt given out to anybody. Its a googlemail account.

 

[JimAtLaw]

Everything was secure its just that she must of gone snooping and found his 'little black book' that contains important stuff. Still not sure how she got his new email address though when it wasnt given out to anybody. Its a googlemail account.

Wait, are you saying he wrote down the new PWs, and she was breaking into his house and getting them out of where he wrote them down? If so, that is an extremely disturbed person and the police should definitely be called, if for no other reason than that you need to establish a record of what has been going on here should it become worse.

Another idea: Could she have planted one or more wireless cameras in his place? This would explain getting the new passwords, getting the new email account, everything.

 

[hackbite]

First rule of computers, is be careful who you listen to. If possible ask an expert or other knowledgeable person.


Huh???

Go to Aobo Mac Keylogger for Mac OS X

It says:


Looks like the pro version can record passwords. YMMV.

yeah apparently must have ADMIN PASSWORD privilege in order to successfully intstall this keylogger for asterisk password retrieval.

 

[Nopstnz8]

I hear you but it still doesn't make sense ? even if like you say malware is accepted without admin permission ... isn't there a built-in system protection against that in mac os x .. specifically regarding passwords behind asterisks * * * * * * ?

good friend of mine did research for us and says he's never heard of anything that can capture log passwords behind asterisks * * * * * so were puzzled?

he refered to such software out there like' Perfect Keylogger for Apple Mac'

'Aobo Mac Keylogger' 'Spector Pro' etc. claim they cannot capture the passwords either ... kinda confuzzling if you ask me.

Wow. What an interesting read. Even though I've never really been hacked, just gotten a few Windows viruses in the past, I am extremely suspicious about virtually anything that deals with the web. You never know when something like this could happen.

A few weeks ago, it was late at night, and I stupidly downloaded a file that allows you to generate hotfile premium accounts. Usually things like this, or the famous "Your computer may be infected" with the Windows XP theme, are obvious clues leading to malware. This is why I switched to a Mac though since you can't really get a virus. It's funny though when you get a message like the "Your computer may be infected" with the XP theme in your web browser on a Mac, because you know for sure how fake it is.

Anyways, back to my encounter a few weeks ago on my Windows 7 partition. So basically I downloaded this app thing, which also had a .txt file attached. I opened it up, and it was like thousands of asterisks like this "********" with carriage returns every 20 lines or so. Once I opened it though, my antivirus agent detected the Trojan and removed it. Thankfully nothing was executed before. I just can't believe I didn't see it coming that the asterisks like "****" mean the code is encrypted! And I just took a CSC 101 class where we did Cyphers and encryption toward the end. Well I just learned something new. Thanks.

It's also nice to see how far Win 7 has come from XP. On XP I would get viruses, but it wouldn't be very frequently. On Win 7, I feel much more secure, but not as secure as Mac. LOL.

Anyways, I just wanted to say thanks to the OP for posting this, and to everyone that contributed, because even someone like me learned a lot of useful things I never would have thought of before.

 

[ViViDboarder]

Wow. What an interesting read. Even though I've never really been hacked, just gotten a few Windows viruses in the past, I am extremely suspicious about virtually anything that deals with the web. You never know when something like this could happen.

A few weeks ago, it was late at night, and I stupidly downloaded a file that allows you to generate hotfile premium accounts. Usually things like this, or the famous "Your computer may be infected" with the Windows XP theme, are obvious clues leading to malware. This is why I switched to a Mac though since you can't really get a virus. It's funny though when you get a message like the "Your computer may be infected" with the XP theme in your web browser on a Mac, because you know for sure how fake it is.

Anyways, back to my encounter a few weeks ago on my Windows 7 partition. So basically I downloaded this app thing, which also had a .txt file attached. I opened it up, and it was like thousands of asterisks like this "********" with carriage returns every 20 lines or so. Once I opened it though, my antivirus agent detected the Trojan and removed it. Thankfully nothing was executed before. I just can't believe I didn't see it coming that the asterisks like "****" mean the code is encrypted! And I just took a CSC 101 class where we did Cyphers and encryption toward the end. Well I just learned something new. Thanks.

It's also nice to see how far Win 7 has come from XP. On XP I would get viruses, but it wouldn't be very frequently. On Win 7, I feel much more secure, but not as secure as Mac. LOL.

Anyways, I just wanted to say thanks to the OP for posting this, and to everyone that contributed, because even someone like me learned a lot of useful things I never would have thought of before.

Just thought I'd pop back in and say... **** doesn't mean anything...

The Mac keyloggers probably don't recognize your admin password since it may be running as a different user while the logger is being run as your local user (unless installed with the admin password, but then the point is moot). If you use the same passwords elsewhere, like most people do, they can capture your password to any website or your email or anything else and then just try your other passwords.

As for a file encrypted with *****. No relation. A lot of times binaries opened in notepad show up as squares or other text that looks random. It's just because Notepad is reading it as ASCII when it's not really.

One MAJOR thing for security... Don't just get in the habit of typing in your admin password every time that window pops up. Just like on Windows Vista/7 where the thing comes up asking for approval to install certain applications. Those windows are notifications that the application wants access to special parts of your OS and that you damn well better trust the application because it will have the authority to have root access.

So every time your computer asks you for your system password... STOP. Think about it. Maybe do a little research. THEN, if it's trustworthy, enter your password.

Play it safe!

 

[Nopstnz8]

Just thought I'd pop back in and say... **** doesn't mean anything...

The Mac keyloggers probably don't recognize your admin password since it may be running as a different user while the logger is being run as your local user (unless installed with the admin password, but then the point is moot). If you use the same passwords elsewhere, like most people do, they can capture your password to any website or your email or anything else and then just try your other passwords.

As for a file encrypted with *****. No relation. A lot of times binaries opened in notepad show up as squares or other text that looks random. It's just because Notepad is reading it as ASCII when it's not really.

One MAJOR thing for security... Don't just get in the habit of typing in your admin password every time that window pops up. Just like on Windows Vista/7 where the thing comes up asking for approval to install certain applications. Those windows are notifications that the application wants access to special parts of your OS and that you damn well better trust the application because it will have the authority to have root access.

So every time your computer asks you for your system password... STOP. Think about it. Maybe do a little research. THEN, if it's trustworthy, enter your password.

Play it safe!

Thanks. I definitely agree, and am also try to make sure I know what the application is trying to access before I approve it. I've even started sanboxing apps as well.

 

[mac2x]

Sort of. Sometimes the communication between your web browser and
the web server is encrypted by the browser itself. Sniffing that traffic
won't reveal much.

The hotmail login page, for example, has a "Use advanced security" option
that takes you to a login page where encryption is used. I can't see
a similar option for facebook, though.

Old thread I know, but you can change the login URL on facebook to https and it will take you to a secure page.

 

[ViViDboarder]

Old thread I know, but you can change the login URL on facebook to https and it will take you to a secure page.

1/300 accounts on facebook have been comprised already. You should change your password anyway.