Lulzsec phishes Xbox LIVE passwords

Oh really? Social engineering?

These people call themselves hackers?

I am distressed. I am greatly disturbed.

@Aminatep: You mean using social engineering is not considered hacking? Because Kevin Mitnick consider that his greatest assets...or I misundertood something?

Social engineering has nothing to do with computers in the first place.

Beating up a guy with a rusty wrench until he gives you his credit card number is social engineering in essence. It IS, however, easier in many cases, but you, quite frankly, don't become a hacker just because you made a phishing page and spammed it a lot.

To put it another way: good hackers know when to use social engineering and when technical cracking. Bad hackers use the former because they don't know the latter.

I hope I made myself clear.

edited 21st Jun '11 5:42:56 AM by Aminatep

I just read that manifesto. These guys make me sick, and I hope someone's got the guts to take 'em down.

edited 21st Jun '11 5:57:03 AM by Ronnie

@Aminatep: I understand, but again refer to Mitnick: he claimed that he ONLY used social engineering to gain access to unauthorized system...plus, phishing is not the only way of social engineering...you say like the method's totally unsophisticated or something...

No, Mitnick claimed that his usage of social engineering was his greatest asset (human is very often the weakest link in a security chain), but far from the only way of cracking. Which is why he deserves respect.

There are some sophisticated ways of social engineering (still not related to actual hacking) but come. the fuck. on.

Phishing dump.

They call themselves hackers because they made a phishing dump.

edited 21st Jun '11 6:14:23 AM by Aminatep

Dude, don't need to shout, I understand what you mean exactly...

Yes, phishing dump, shouldn't have been all that prideful, all that...still, even then, this does not mean that social engineering is not to be considered as a hacking method...just because it can be utilized in applications not involved with computer does not mean it's not a hacking method, all right?

edited 21st Jun '11 6:40:28 AM by onyhow

I would consider it a hacking method, but I wouldn't consider people who rely on it almost exclusively to be hackers.

So uh how do I remove my credit card details from Xbox Live?! D:

By selecting it on your console and picking the options to remove the card.

If you haven't given out your password to anyone, they don't have it. They didn't "compromise Xbox LIVE." They just went around asking people for their passwords, so now they have the passwords of those who fell for it.

edited 21st Jun '11 8:59:55 AM by INUH

IF I WANTED TO SHOUT I'D USE CAPSLOCK

In a nutshell.

edited 21st Jun '11 9:03:19 AM by Aminatep

True, but it's still important to know. What if you have a bad housemate?

Well, yeah. But I'm trying to diffuse the panic about this.

No panic should even be created. THEY HAVE NOTHING.

Title changed for the sake of accuracy.

Except I probably got the jargon wrong but w/e.

All according to keikaku. *

Thank you Bobby.

Don't want people to panic quite frankly.

Oh, so Lulzsec only got me once.

Looked at the list: crapload of hits from South America, apparently gleaned randomly from various sites, NOT Xbox Live (as some of the news state). Checked the list for mail addresses from Poland - got two obvious "trash" accounts and maybe four real ones. Had more luck with the one they jacked from pron.com - too bad the morons who got their hands on it before don't know what a "silent entry" is and played havoc with what they found.

So if it's not related to videogames at all, let's move this thread to another subforum entirely?

More importantly, it looks like it's already outdated - they didn't say where they got it from, or when. Tried finding sites where the pairs would match, didn't find any (I did the same with the one from pron.com And It Worked!).