Technical Question

[Hawkes7]

Is there anyway to find out who has stolen your password/username combo.

I've had my subscription to a site revoke cos of this. I certainly didn't post the details anywhere and my pc is up-to-date with firewall/antivirus etc.
I don't blame the site (I won't mention names) cos if I were in there shoes I'd be annoyed. I'm more annoyed that because people are cheap skates I've now lost a subscription I paid for (and its not like earning alot atm either).

Any one have any ideas?

[MICHELLEMOIST]

i am a techy belive it or not! the only people that would kno who has stolen your log in would be the web masters of that site.

they would be able to tell which IP has logged into wot account at wot time.
weather they are willing to give you that information is up to them

and even when you have the IP address this may or may not actually help u identify who it actually is. it may help you see that its sumone in japan for example. but gettin a name and address can somtimes be hard.

i work for an ISP
on thier network abuse team you see
so Identifying IP address is something i do everyday!

if theres anything else techy i can help anyone with please let me kno
xxx

[Snow Patrol]

Was it an 'easy' combo to guess?

By 'easy' what I mean is could both of the words be found in a dictionary?

Even if they were not obvious words, like say USER: oblivion PASS: cautionary ?

For example?

[Asylum]

Who was the billing company as alot insist on large usernames and password and most generate random characters which to brute force would take years.

As them to tell you what IP address's logged in using those details.

Unless someone has cracked your email account its unlikely its been cracked.

Also are you using a download manager? as these can cause problems for sites.

We have a system that stops passwords once they have been used with more than one IP in a given time and it works a treat.

Good luck. The least they should do is offer some form of evidence.

[rgb]

I think it's a bit rough cancelling your subscription straight away. I would have emailed you a replacement username/password - and if THAT was abused then I would cancel the subscription. To paraphrase Lady Bracknell: once is unfortunate, twice is carelessness.

[Simon]

I get literally 1000's of brute force and dictionary attacks and as soon as they get the correct combo they're blocked out, it really makes you wonder why they bother! With my security, StrongBox, I can pretty much tell whether a login has been shared or cracked.
I'd give you the benefit of the doubt the first time it happened and give you a new login of my choice, one that wouldn't be so easy to crack. If it happened again it would then probably be either your security at fault or sharing.
The way they've dealt with it they'll be lucky to see any of your money again so it's their loss. Next time choose a login that uses different characters, lower and upper case letters, numbers, - and _ etc.

[Hawkes7]

Actually Simon I think it happened with you once a few years ago (back when my pc was less secure), and you did change my pass/username.

I think my username/password combo were a bit easy - its just habit to use one like that as its quick to remember. I'll make sure next time to use one of my harder ones.

Thanks for the advice everyone.