[Pauldotcom] Username Check

[xgermx]

No way to know for sure I suppose, but there are easier (see: cheaper)
ways of harvesting usernames.

2008/10/27 Dan McGinn-Combs <dgcombs at gmail.com>:
> Are they really checking or simply *collecting* usernames themselves. Looks
> like a nifty toy to do that with.
>
> On Mon, Oct 27, 2008 at 9:09 AM, xgermx <xgermx at gmail.com> wrote:
>>
>> http://www.usernamecheck.com/ is a simple website that shows where you
>> have a username registered (checks against 75 different sites). To a
>> normal web user, this probably seems bengin, but from the attacker POV
>> this is gold.
>> Pauldotcom - registered on 13 sites, that leaves at least 62
>> opportunities for social engineering.
>> _______________________________________________
>> Pauldotcom mailing list
>> Pauldotcom at mail.pauldotcom.com
>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>> Main Web Site: http://pauldotcom.com
>
>
>
> --
> Dan McGinn-Combs, Security+, GSEC, CISSP, CISA
> dgcombs at gmail.com
> Grand Central: +1 404 492 7532
> Peachtree City, Georgia USA
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
>