Another round of Xtra\Yahoo spam?

Forums › Spark New Zealand › Another round of Xtra\Yahoo spam?

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11

1749 posts

Uber Geek
+1 received by user: 426

# 977096 30-Jan-2014 09:53

One person supports this post

Quote from Telecoms status page, today

"Yahoo have advised us that they are experiencing an email security threat, which we have reason to believe may have compromised some Xtra email customers’ accounts."

So, have more a/c's been hacked or not ??
Is the current round of spam, from last years stolen contact lists, or a new issue ??
Do Telecom even know whats going on, are yahoo being honest & up front with the issue ??

BT moved all their customers off yahoo last year due to these issues, so it is possible . Are Telecom locked into Yahoo with a contract
or do Telecom simply not want to put the time & $$ into moving away from Yahoo email ?

Ragnor

8033 posts

Uber Geek
+1 received by user: 390

Trusted

# 977346 30-Jan-2014 13:14

Zeon: Maybe they should just start publishing SPF records......

QFT

Ragnor

8033 posts

Uber Geek
+1 received by user: 390

Trusted

# 977350 30-Jan-2014 13:15

richms: They could deploy some spf records so that the spoofing doesn't work. Not hard except that all their customers with incorrect smtp settings would find emails being blackholed.

So proper SPF records would fix two problems...

This kind of legacy "technical debt" need to be paid down at some point, now's good....

mattwnz

14884 posts

Uber Geek
+1 received by user: 2019

# 977357 30-Jan-2014 13:21

1101: Quote from Telecoms status page, today

"Yahoo have advised us that they are experiencing an email security threat, which we have reason to believe may have compromised some Xtra email customers’ accounts."

So, have more a/c's been hacked or not ??
Is the current round of spam, from last years stolen contact lists, or a new issue ??
Do Telecom even know whats going on, are yahoo being honest & up front with the issue ??

BT moved all their customers off yahoo last year due to these issues, so it is possible . Are Telecom locked into Yahoo with a contract
or do Telecom simply not want to put the time & $$ into moving away from Yahoo email ?

Who did BT move to?

1101

1749 posts

Uber Geek
+1 received by user: 426

# 979236 3-Feb-2014 10:02

And finally the explanation as to why Telecom cant dump Yahoo
This would had to have been one of the more stupid decisions, management were getting paid how much ?
If customers loose the @xtra adress, many will have no good reason to stay with Telecom as their ISP

"....When Telecom outsourced Xtra to Yahoo in 2007, it handed over the rights to the Xtra internet domain to Yahoo.
That means that if it now dropped the service, it could not guarantee customers would be able to retain their existing email addresses"

http://www.stuff.co.nz/technology/digital-living/30013748/no-end-in-sight-for-xtra-agony

Lazarui

136 posts

Master Geek
+1 received by user: 27

# 979477 3-Feb-2014 15:52

One person supports this post

1101: And finally the explanation as to why Telecom cant dump Yahoo
This would had to have been one of the more stupid decisions, management were getting paid how much ?
If customers loose the @xtra adress, many will have no good reason to stay with Telecom as their ISP

"....When Telecom outsourced Xtra to Yahoo in 2007, it handed over the rights to the Xtra internet domain to Yahoo.
That means that if it now dropped the service, it could not guarantee customers would be able to retain their existing email addresses"

http://www.stuff.co.nz/technology/digital-living/30013748/no-end-in-sight-for-xtra-agony

First time I've heard Telecom Handed over the rights to the @xtra.co.nz domain as:

query_datetime: 2014-02-03T15:50:09+13:00
domain_name: xtra.co.nz
query_status: 200 Active
domain_dateregistered: 1997-03-06T00:00:00+13:00
domain_datebilleduntil: 2015-01-01T00:00:00+13:00
domain_datelastmodified: 2013-12-21T01:35:54+13:00
domain_delegaterequested: yes
domain_signed: no
%
registrar_name: Domainz Limited
registrar_address1: Private Bag 1810
registrar_city: Wellington
registrar_country: NZ (NEW ZEALAND)
registrar_phone: +64 4 473 4567
registrar_fax: +64 4 473 4569
registrar_email: @domainz.net.nz
%
registrant_contact_name: Telecom IP Limited
registrant_contact_address1: P O Box 949
registrant_contact_city: WELLINGTON
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +64 44 738278
registrant_contact_fax: +64 44 723358
registrant_contact_email: @ajpark.com
%
admin_contact_name: A J Park
admin_contact_address1: P O Box 949
admin_contact_city: WELLINGTON
admin_contact_country: NZ (NEW ZEALAND)
admin_contact_phone: +64 44 738278
admin_contact_fax: +64 44 723358
admin_contact_email: @ajpark.com
%
technical_contact_name: Xtra Limited
technical_contact_address1: Private Bag 92028
technical_contact_address2: Auckland New Zealand
technical_contact_city: Auckland
technical_contact_country: NZ (NEW ZEALAND)
technical_contact_phone: +64 9 355 5200
technical_contact_email: @xtra.co.nz

I don't see yahoo in any of that, Fairfax 'reporters' being fairfax 'reporters'

freitasm

BDFL - Memuneh
63601 posts

Uber Geek
+1 received by user: 14079

Administrator

Trusted

Geekzone

Lifetime subscriber

# 979491 3-Feb-2014 16:18

I asked Telecom about this and got no reply.

I am not sure the journalist didn't get the meaning of "MX delegation" or just trolling.

Sharesies | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) |

My technology disclosure | Business Transformation | Enterprise Content Management | Customer Relationship Management | Sharesies investment fund

Dairyxox

1464 posts

Uber Geek
+1 received by user: 389

# 979718 3-Feb-2014 20:59

2 people support this post

The cat seems to be out of the bag. Telecom are now teaching people how to delete spam.

The spammers can spoof the address' to their hearts content, and have the address books for all the compromised accounts, to keep making their messages look legit.

They (the spammers) don't need any more security breaches. As long as people keep their xtra email address' , and they have the same social contacts, we're all going to be fair game.

surfisup1000

4200 posts

Uber Geek
+1 received by user: 1434

# 979945 4-Feb-2014 10:07

Jeez, telecom have really played fast and loose with their customer data.

I wonder why telecom tolerate such frequent hacks to their customer email accounts? It is getting to the point where I think telecom enjoys letting their customers be hacked.

I've largely moved away from using my telecom email now. It is just getting way too many hacks.

thegeekboy

87 posts

Master Geek
+1 received by user: 15

# 980078 4-Feb-2014 13:03

surfisup1000: Jeez, telecom have really played fast and loose with their customer data.

I wonder why telecom tolerate such frequent hacks to their customer email accounts? It is getting to the point where I think telecom enjoys letting their customers be hacked.

I've largely moved away from using my telecom email now. It is just getting way too many hacks.

The problem here is that Telecom no longer have any control over the Xtra brand.
Yahoo own the domain and rights to Xtra 100%. That happened back in 2011.

There's no way that those Xtra customers can leave Yahoo - and also keep their Xtra email addresses.
http://techday.com/telco-review/news/telecom-sells-yahooxtra-stake/19896/

freitasm

BDFL - Memuneh
63601 posts

Uber Geek
+1 received by user: 14079

Administrator

Trusted

Geekzone

Lifetime subscriber

# 980095 4-Feb-2014 13:37

2 people support this post

So, in reality these are Yahoo! customers, not Telecom New Zealand's customers.

Dump the service entirely then, and let Yahoo! deal with it ;)

Sharesies | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) |

My technology disclosure | Business Transformation | Enterprise Content Management | Customer Relationship Management | Sharesies investment fund

Lazarui

136 posts

Master Geek
+1 received by user: 27

# 980103 4-Feb-2014 13:45

thegeekboy:
surfisup1000: Jeez, telecom have really played fast and loose with their customer data.

I wonder why telecom tolerate such frequent hacks to their customer email accounts? It is getting to the point where I think telecom enjoys letting their customers be hacked.

I've largely moved away from using my telecom email now. It is just getting way too many hacks.

The problem here is that Telecom no longer have any control over the Xtra brand.
Yahoo own the domain and rights to Xtra 100%. That happened back in 2011.

There's no way that those Xtra customers can leave Yahoo - and also keep their Xtra email addresses.
http://techday.com/telco-review/news/telecom-sells-yahooxtra-stake/19896/

Yahoo!Xtra was just the Yahoo.co.nz homepage, it was similar to the Xtra MSN from earlier on they used to have and is similar to the the old BT/Yahoo relationship that used to exsist, Telecom still is the registra holder of @xtra.co.nz.

There is nothing that says Telecom has ever sold on the @xtra.co.nz Domain I'm yet to see one piece of evidence that supports this suppsoed 'fact'

res

13 posts

Geek
+1 received by user: 3

# 980510 5-Feb-2014 09:06

3 people support this post

I see Chris Quin was on the radio misleading people yesterday:

- Telecom is doing all it can??? Has it sacked Yahoo like BT? Or if it really has lost control which does not appear to be the case, has it disowned Yahoo and Xtra email, telling us what the commercial relationship with Yahoo is?

- "Mr Quin said the Yahoo/Xtra system is as well protected as any of the major services" (off RadioNZ web site)??? Really? So Googlemail , Hotmail/Outlook etc are all making headlines for the same reasons?

Front up Telecom, take some ownership. Do something.

Of the few PC's/Users I look after, one Xtra account did get locked (this account had a 9 character password, a brute force attack seems unlikely) - but no plain Yahoo accounts were affected. Curiously plain Yahoo accounts have access to a login history page, though the link is hard to find, but Yahoo-Xtra accounts don't have this. I discovered though that the link does work if cut and pasted from a plain Yahoo session to an Xtra session. My logins to this not regularly used Xtra account were there, all showing access from "Browser" in NZ. But there at the bottom, a successful login from the Ukraine marked not "Browser" but "Yahoo Partner Access"!!

My guess would be that Yahoo do not even use second level authentication on "partner" access. But we'll never know for sure I guess. We'll just know that they are hopelessly insecure however they achieve it!

Athlonite

1828 posts

Uber Geek
+1 received by user: 215
Inactive user

# 980546 5-Feb-2014 10:22

Lazarui:
thegeekboy:
surfisup1000: Jeez, telecom have really played fast and loose with their customer data.

I wonder why telecom tolerate such frequent hacks to their customer email accounts? It is getting to the point where I think telecom enjoys letting their customers be hacked.

I've largely moved away from using my telecom email now. It is just getting way too many hacks.

The problem here is that Telecom no longer have any control over the Xtra brand.
Yahoo own the domain and rights to Xtra 100%. That happened back in 2011.

There's no way that those Xtra customers can leave Yahoo - and also keep their Xtra email addresses.
http://techday.com/telco-review/news/telecom-sells-yahooxtra-stake/19896/

Yahoo!Xtra was just the Yahoo.co.nz homepage, it was similar to the Xtra MSN from earlier on they used to have and is similar to the the old BT/Yahoo relationship that used to exsist, Telecom still is the registra holder of @xtra.co.nz.

There is nothing that says Telecom has ever sold on the @xtra.co.nz Domain I'm yet to see one piece of evidence that supports this suppsoed 'fact'

did you even read the link provided by the poster, did you read the bit that said Telecom divested itself of it's 49% stake in yahoo/xtra so now yahoo own it 100% of it

Telecom NZ may still own the xtra.co.nz domain name but yahoo owns the email services side of it and good luck in getting them to release user data back to telecom

DigiDog

51 posts

Master Geek
+1 received by user: 18

# 980547 5-Feb-2014 10:31

res: I see Chris Quin was on the radio misleading people yesterday:

Good post res. I heard the Quin interview and assumed he was just a Telecom spin doctor with minimal technical knowledge whose job was to appease the Xtra masses. He used phrases like, 'We have to remember that there's been an increase in this sort of activity all around the world' to imply that Xtra hasn't been singled out. I'm surprised that none of the tech journalists have got a grip on this story yet and most media seem happy to accept the Telecom line that Xtra users should just 'delete spam emails'.

Yahoo's service is obviously badly compromised. Telecom's refusal to implement SPF makes the spammers' job so much easier.

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11