+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Make your Hackforums account almost unhackable! (/showthread.php?tid=2611270)
Make your Hackforums account almost unhackable! - Mag1c-Pot - Jun 22, 2012
So I had originally posted a brief explanation of this in Black Shadow's advice thread but it died and I don't think anyone saw it. His advice was based on changing privacy settings and making a different email for HF, but there is a way to make your account nearly hacker proof.
One of the greatest things Microsoft came up with was a Hotmail feature called email Alias. With it you can create 5 different mirrors of your real email (when you waste these 5, you have to wait A FULL YEAR before making a new one, even if you delete the ones you made - I learned this the hard way). It basically works like a mask, it has EVERY function you need in an email EXCEPT the ones that hackers can exploit to steal it. The reason why it makes your email practically unhackable is due to the fact you can't sign in hotmail with it. Although you CAN sign in any webpage you register in.
Why it makes your email externally unhackable:
- A hacker won't be able to know if it's a real email or an alias.
- If he phishes you, it will be useless because an alias email can't be used for login.
- He can't dox it because it's only a mirror of the real thing.
- He can't bruteforce it.
- If he email bombs it, you can just delete the alias folder on hotmail and make a new folder.
- If he tries to SE you via "I forgot my password", he will be angry once he introduces your alias email in the text box and receives an "invalid email" error message.
Other advantages of using an alias for HF and other webpages:
- You can create a folder for Hackforums in your hotmail and every message sent to the alias will go into that folder.
- It doesn't just forward messages to your real email, you can send emails from it.
- You can prevent spam using it for registrations in websites that require an account to view/download something (alias can be deleted at any time).
- If you have some business going on like sales on different forums or different products, you can use various alias instead of having several different emails for different things.
How to create an alias (tutorial by Microsoft):
In the left pane next to Inbox, click the Tools icon, and then click Create a Hotmail alias.
[img]http://res1.windows.microsoft.com/resbox/en/Live%20Explore/main/77783fe2-068b-488c-8768-6826a83d3030_25.jpg[/img]
In the dialog box, type an email address for the alias you want to create. On the next screen, decide where you want to put email sent to this alias—either into your inbox or into a new folder.
[img]http://res2.windows.microsoft.com/resbox/en/Live%20Explore/main/27654c9a-400e-4349-9775-d64301cb2da5_19.jpg[/img]
Now you're ready to send messages from your new alias. Click New to create a message, click the arrow next to the Hotmail address, and then select the alias you want to use.
Of course it's still possible to hack your email via a RAT or a Stealer, but those are under YOUR control, you just have to be careful what you run on your computer. The biggest threat to getting hacked is the exposure of your email and this is a perfect shield for it.
Trick 2:
Here's another trick I use as a secondary security measure to buy some time in case my email gets hacked somehow:
- In your email, set a rule to block every password reset message from HF (or Paypal, etc.). You can do this by requesting a password reset and then delete that email + blocking the sender. OR create a rule like this that blocks any message that contains "Password reset" in the subject.
How will this trick protect your account?
When your email gets hacked, the hacker will have to go to the website he wants to use your account on, and because the password will be different than the email one he stole (make sure of that), he will have to request a password reset but he won't receive it because your email is set to block it. It will VERY UNLIKELY occur to him to check the block list and remove the rule that prevents the email from getting the password reset request. Because why would anyone block something like that? 😁
If you need one yourself, just remove the block and re-add it later.
NOTE: NEVER delete an alias after using it for a registration. If you register on HF with, say, [email protected] and then delete it, the email name will become available again and then someone else can recreate it and snatch your HF account (unless you change the email here). Again, I have learned this from self experience.
Thanks for reading. Good luck. ;)
* - Glassy - Jun 22, 2012
This can come in handy for many. :)
* - bugga - Jun 22, 2012
This is a nice handy thread for member's, easy to understand and detailed. Good job :).
* - BotnetLocker - Jun 22, 2012
That alias thing is pretty cool, I never knew you could do that
* - ☆ Mark I. Mcclam ☆ - Jun 22, 2012
Microsoft Emails Are Easy To Hack Possibly
* - Grumpy - Jun 22, 2012
Actually very very helpful. I knew of the Alias feature but I never thought of using it for security purposes like this. Great idea, very well thought out and explained. Thanks.
* - Douchebag # 145 - Jun 22, 2012
Amazingly detailed and very organized. It looks great. Thank you very much for posting this!
* - ( ͡° ͜ʖ ͡°) - Jun 22, 2012
Wow, this is awesome! I never knew about this.
* - Sol Yurick - Jun 22, 2012
Very detailed and easy to understand thread you posted here. Nice job.
* - prodigyhf - Jun 22, 2012
You should add a part two for Gmail users like myself. Other then that, great job!
* - Glassy - Jun 22, 2012
(Jun 22, 2012 06:26 PM)Mark I. Mcclam Wrote: Microsoft Emails Are Easy To Hack Possibly
Not only are they the easiest to hack, but the emails that are also most hacked. Hotmail/live uses their email service for almost every product.
Also, why do you capitalize each word with one letter being capitalized. It's quite annoying, don't you think?
* - h4kr! - Jun 22, 2012
I think gmail does this too. i have not used it,though so i don't know the functionality and limits of this feature.
* - Mr Undoubtable - Jun 22, 2012
One of the time's I wish I could +rep on here. Very nice post.
* - Prince™ - Jun 22, 2012
Looks good. Thanks for the advise. :)
* - Dan. - Jun 22, 2012
Nice job. Hopefully some members will listen to this. :)