Defense in Depth

Read all 'Hotmail' posts in Defense in Depth
June 4, 2008 10:03 AM PDT

Updated: Hotmail users getting locked out

by Robert Vamosi
  • 14 comments

As a follow-up to last week's story on Hotmail users getting locked out, the second account mentioned has been restored.

Last Wednesday, Hotmail account holder Will showed CNET an e-mail verifying that he notified Microsoft on May 2 that his Hotmail password had been changed without his knowledge. Microsoft support staff responded with the following message: "Thank you for your message to MSN and Windows Live Privacy. I understand you are having difficulties accessing your MSN Hotmail account because you believe someone has gained unauthorized access to your account. For assistance with this issue, please contact the MSN Support staff using the (following) form."

Will filled out the form, and several weeks passed. Last Wednesday, he told CNET he had received no further response from Microsoft.

Account hijacking, where someone else steals your password and then changes it to deny you access, is a problem that affects not only Hotmail, but AOL and even eBay.

In a statement to CNET, a Microsoft representative said, "We can't comment on the specifics of a particular investigation. However, we can say that attempts to hijack accounts through a variety of means (for example, phishing scams, keystroke logging, and any number of other known security threats) occur against all online proprieties on an ongoing basis. Microsoft is constantly working to help ensure the security and privacy of its customer accounts."

Once again, the Microsoft representative put the fault for the lockout on the user. "In addition, we continue to recommend that customers always exercise appropriate caution and safeguards to protect their account information online, whether for their Windows Live accounts, banking accounts, or any other accounts they have online. Microsoft provides information on online safety and security, including specific guidance on how to help protect your Windows Live ID account security."

But Microsoft didn't answer our direct question: Why did it take a month, plus intervention from CNET, to restore Will's account?

Perhaps this e-mail statement comes the closest to a possible explanation: "As an FYI, we found the original communication to Will in response to his request, but per his e-mail to you, it seems for whatever reason, he did not receive it. We appreciate you flagging the issue, as we make it a practice to respond to all customer issues in a timely manner."

May 30, 2008 11:38 AM PDT

Hotmail users getting locked out

by Robert Vamosi
  • 14 comments

Imagine getting an e-mail from a friend or family member with the following subject line: "ITS IMPORTANT YOU GET BACK ME TODAY."

CNET is aware of a couple of Hotmail users who have recently gotten locked out of their accounts. In one case, someone who had hacked into an account sent a desperate-sounding e-mail asking for money under the account holder's name.

Microsoft had no direct comment.

The body of one of the e-mails, sent to a CNET reporter, reads:

"I am in a hurry writing this mail. I had a trip to oxfordshire, United Kingdom for an urgent event . Unfortunately for me all my money got stolen at the hotel where i lodged from the attack of some armed robbers and since then i have been without any money i am even owing the hotel here,So i have only access to emails,my mobile phone can't work here so i did not bring it along. Please can you lend me $1500 so i can return back and settle the hotel bills i would return it back to you as soon as i get home, I am so confused right now. You can have it sent through western union."

The owner of the Hotmail account was confirmed to be at home, safe.

"If a customer at any time suspects their account has been accessed by an unauthorized party, they should contact our customer support team, a Microsoft representative said.

That's exactly what a second locked-out Hotmail user did in early May. Microsoft support staff responded with the following message: "Thank you for your message to MSN and Windows Live Privacy. I understand you are having difficulties accessing your MSN Hotmail account because you believe someone has gained unauthorized access to your account. For assistance with this issue, please contact the MSN Support staff using the (following) form." The message is signed by Raktim from MSN and Windows Live Privacy.

After filling out the form, several weeks passed, and the Hotmail account holder said he has still received no further response from Microsoft.

"Microsoft is committed to helping consumers have a safe, secure, and positive online experience," a company representative said Thursday. In the case of the first e-mail, Microsoft worked with the owner to restore her access. In the case of the second, it's still pending. "As always, we reiterate our general guidance to customers to help protect themselves and their accounts by exercising extreme caution when opening unsolicited attachments and links from both known and unknown sources, and that they install and regularly update antivirus software," the representative said.

Without addressing what might have occurred regarding the second person's account, Microsoft appears to be blaming the user: if you had used more caution, you probably wouldn't be in this situation.

The Microsoft representative mentioned the company's online security and safety best practices for customers, including specific guidance on how to help protect your Windows Live ID account security. But when it comes to protecting your free Hotmail e-mail account, users appear to be without much recourse.

  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Defense in Depth

Covering computer viruses and computer crime, Robert Vamosi goes beyond the hype to provide you with expert interviews of the top security researchers, as well as offering the hands-on, nontechnical advice you'll need to stay safe online.

Add this feed to your online news reader

Defense in Depth topics

Most Discussed



advertisement

Inside CNET News

Scroll Left Scroll Right