Has Xtra email been breached again?

Forums › Spark New Zealand (including Skinny and BigPipe) › Has Xtra email been breached again?

1 | 2 | 3 | 4 | 5 | 6 | 7

1421 posts

Uber Geek
+1 received by user: 314
Inactive user

#798464 12-Apr-2013 15:38

kiwigeek1: welcome to the world of yahooxtra mail issues

so does your fault clear if login via webpage email for about 5 minutes.. I havent timed it
but seems to be about that time.. without changing password or a thing like.?

im forwarding email inbox to gmail but left the imap to check spam folder so i can see
if the fault ever clears

Notification Voice: 3.0.0.0

--- Error ---
rem-xtra1SPAMfolder [1000: IMAP] ['imap.mail.yahoo.com ' (port: 993)] [SSL: 1]
Login Error ([AUTHENTICATIONFAILED] Incorrect username or password.)

I see this a lot. Can log in via web but not phone, outlook etc.

Two things:

1 there seems to be glitches between authentication severs and it has gotten worse since the first big breach a couple of months back.

2 - If you are using multiple ways to access your email (ie phone, outlook etc) then my suggestions is to:

turn off your phone
Turn off your mail clients
Reboot your PC
logon via web client
Log out of web client
Try your mail client.

I suspect yahoo xtra dont handle multiple connections to the same account as seemlessly as they could. It is similar to pop locks in other systems where more thn aone connection to a mail client is made.

Rebooting te Pc, and turning off the mobile device, should clear all ports / connections/ tcp reservations etc that may be held open.

HTH

Shane

kiwigeek1

637 posts

Ultimate Geek
+1 received by user: 12
Inactive user

#798490 12-Apr-2013 16:11

no the block still happens after 5 minute if have nothing access account via imap or pop

web mail login frees it so it all works for 5 minute

i have only one thing accessing it.. every 15minute well now 1 hour and still happens

the thing is other accounts are fine just one account happening on at moment
it did occur on others for a short time and they cleared but this one wont clear
for good so I think more is going on in background

being a xtra plus account it should allow multiple accesses and
sim connections from the same IP !!!

all their auth server needs is to check its a NZ address IP like.
and allow access regardless
I also think they could improve the system
with a way for a user to enter approved ip ranges (they could auto insert telecoms one
for xtra users) and also
that can only be altered via password and security
question then the problem is solved
even if hackers get the password they
cant access if outside nz cos they wont know security question and you
cant access the security question section once set or only by a sms text message

mattwnz

20520 posts

Uber Geek
+1 received by user: 4798

#799666 15-Apr-2013 14:56

Leo Laporte was discussing the Yahoo problem in the weekend, and the people he was talking to had the identical types of problem. So it looks to be a universal problem related to yahoo accounts. His suggestion was to use gmail instead.

Indio

153 posts

Master Geek
+1 received by user: 2

#800117 16-Apr-2013 12:16

Just a quick question: if one has ceased being an XTRA customer, what happens to one's xtra email account? Does it still operate or is it terminated?

I've emailed but so far no response...

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#800131 16-Apr-2013 12:21

Indio: Just a quick question: if one has ceased being an XTRA customer, what happens to one's xtra email account? Does it still operate or is it terminated?

I've emailed but so far no response...

Your xtra account gets terminated which can happen straight away or can happen after a few months.

But unless you transfer the email account to someone else the account gets closed.

This is because the xtra account is bundled with Flickr pro and other premium services provided by Yahoo!

For a number of years accounts weren't getting suspended but that has been fixes up now.

kiwigeek1

637 posts

Ultimate Geek
+1 received by user: 12
Inactive user

#800135 16-Apr-2013 12:28

you think the free yahoo pro account simply becomes a normal yahoo account so atleast
they keep the customer even as free user they can show ads on the webmail page etc

dont seem clever business model

and of course your not allowed to recreate the same yahoo nickname once cancelled are you

the only thing is you loose xtra.co.nz on end for yahoo.com or whatever so I guess
the downside is no one can keep emailing it.. but still could be a option to keep the nickname
with new domain

but who wants it anyhow.. my pop.imap still down.auth error blag blag. its rubbish service
but webmail and forward works with the same credentials

Geekzone support

Support Geekzone with one-off or recurring donations Donate via PressPatron.

Indio

153 posts

Master Geek
+1 received by user: 2

#800136 16-Apr-2013 12:32

plambrechtsen:
Indio: Just a quick question: if one has ceased being an XTRA customer, what happens to one's xtra email account? Does it still operate or is it terminated?

I've emailed but so far no response...

Your xtra account gets terminated which can happen straight away or can happen after a few months.

But unless you transfer the email account to someone else the account gets closed.

This is because the xtra account is bundled with Flickr pro and other premium services provided by Yahoo!

For a number of years accounts weren't getting suspended but that has been fixes up now.

Thanks for the prompt reply. Can one reinstate the email account if one were to re-sign up with xtra?

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#800139 16-Apr-2013 12:36

kiwigeek1: you think the free yahoo pro account simply becomes a normal yahoo account so atleast
they keep the customer even as free user they can show ads on the webmail page etc

dont seem clever business model

and of course your not allowed to recreate the same yahoo nickname once cancelled are you

the only thing is you loose xtra.co.nz on end for yahoo.com or whatever so I guess
the downside is no one can keep emailing it.. but still could be a option to keep the nickname
with new domain

but who wants it anyhow.. my pop.imap still down.auth error blag blag. its rubbish service
but webmail and forward works with the same credentials

There is a fair amount of internal telecom infrastructure that supports the xtra domain including the end to end subscriber management. I should know since I have worked on a fair amount of it. The domain itself is still owned by Telecom not Yahoo.

So when you have ceased all billing relationships with Telecom and don't want any services from us then what should happen?

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#800142 16-Apr-2013 12:39

Indio:
plambrechtsen:
Indio: Just a quick question: if one has ceased being an XTRA customer, what happens to one's xtra email account? Does it still operate or is it terminated?

I've emailed but so far no response...

Your xtra account gets terminated which can happen straight away or can happen after a few months.

But unless you transfer the email account to someone else the account gets closed.

This is because the xtra account is bundled with Flickr pro and other premium services provided by Yahoo!

For a number of years accounts weren't getting suspended but that has been fixes up now.

Thanks for the prompt reply. Can one reinstate the email account if one were to re-sign up with xtra?

Yep sure can. It goes into a terminated state but can be reenabled although Yahoo can take a while to make it live again... But at worst takes a few days to sort.

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#801173 17-Apr-2013 19:42

Looking at my captured spam bin I got a heap more on the 15th and 16th from what appear as xtra accounts again.

And further word of warning, just got a Boston Bombing related email with whats probably a nasty malicious link contained within

Want me to forward this one for analysis or just mark it as spam

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#801232 17-Apr-2013 22:39

The boston bombing one has nothing to do with Xtra's compromise, irrelevant (and typically cheeky).

No signature to see here, move along...

Samsung

Shop now on Samsung phones, tablets, TVs and more (affiliate link).

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#801247 17-Apr-2013 23:00

its relavent in the fact it was attached to me pointing out as of 2 days ago, there is still original breach mail circulating

I took the opportunity to mention it and see if the staff had any interest rather than start a new thread,
especially as it was missed by the spamtrap, and the other half a million users may not be so savvy to realise there is a warning as of this morning of drive by exploits with an apparent link to youtube videos and news articles via email.. of which this example is.

sorry for attmetping to be hpelpfull without creating just another spam thread.

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#801291 18-Apr-2013 08:11

Oblivian: Looking at my captured spam bin I got a heap more on the 15th and 16th from what appear as xtra accounts again.

And further word of warning, just got a Boston Bombing related email with whats probably a nasty malicious link contained within

Want me to forward this one for analysis or just mark it as spam

If they are sourced from within the Yahoo mail system I would be interested in getting forwarded any spam including the headers. The fact that xtra.co.nz doesn't have an spf record is another issue, something I am trying to resolve but not without a non-trivial impact to customers who use their email from non-telecom based providers. pl at telecom.co.nz is how to get hold of me.

DarthKermit

5346 posts

Uber Geek
+1 received by user: 3317

Trusted

#801530 18-Apr-2013 12:24

I got an email from my father at 3:44 am, titled "Hello!" containing nothing but a link to some site. There's no way he was online at that time. Sounds like his account was hacked to me.

Whatifthespacekeyhadneverbeeninvented?

freitasm

BDFL - Memuneh
80662 posts

Uber Geek
+1 received by user: 41090

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#801552 18-Apr-2013 12:31

Oblivian: its relavent in the fact it was attached to me pointing out as of 2 days ago, there is still original breach mail circulating

I took the opportunity to mention it and see if the staff had any interest rather than start a new thread,
especially as it was missed by the spamtrap, and the other half a million users may not be so savvy to realise there is a warning as of this morning of drive by exploits with an apparent link to youtube videos and news articles via email.. of which this example is.

sorry for attmetping to be hpelpfull without creating just another spam thread.

Incoming spam from an address other than a @xtra.co.nz address is not related to the Yahoo! Xtra problems. If your account were sending out spam or if those emails you are seeing have @xtra.co.nz and were sent from the Yahoo! servers then that'd be related.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

1 | 2 | 3 | 4 | 5 | 6 | 7