social network security & backdooring email

Social Networking Security &

Backdooring Email Presented by

Syarif

!Seminar & Workshop Nasional Security System

Malang, Juni 5 2011 Universitas Muhammadiyah Malang

• http://www.google.com/search?q=fl3xu5

• http://fl3x.us

Whoami

http://fl3x.us

Agenda

• Social Networking ?

• Social Networking : Attacks & Defense

• Backdooring Email

• There is No Privacy anymore :)

• How to protect your self

Social Networking ?

Facebook Statistics

Twitter Statistics

Facebook & twitter attack


• Phishing


• Session Hijacking

• Firesheep

facebook & twitter defense

• Be a paranoid & don’t trust anyone on the internet

• Never put some sensitive information carelessly

• Keep your eyes, Always check the correct url

• Never Subscribe unauthorized applications

• Always remember, wireless is not secure. Keep “safety” browsing :p

• Always using https

• etc

Email attack : Backdooring Email ;)

• Why ?

• Email is very important

• as a communication media

• Email is a privacy

• Everything using email

• User account : facebook, twitter, etc

• Passwords

• paypal account

• domain & hosting account


• Motivation ?

• Just for fun :)

• Jealous / Revenge

• Get important data

• Get Final Exam Task & Answer :p

• Spy

• Scamming

• Money reason : paypal, etc

• Domain & hosting take over


• Prelinimary ? • Social Engineering

• password obtained by hacking other websites ~ one password for all

Backdooring Email ? Yes you can ;)

• Using what ?

• Why ?

• most people using it

• easy to use

• could be used to impersonate :p

• high capacity mailbox

• 10 more accounts could be backdoored in one mailbox

• no need to log in the target mailbox

• could be used to backdoor all of mail accounts in some mail server :)

there is no privacy anymore

someone is watching you !

How to Protect Yourself ?

• Always Check Last Log in your email

• Never put some sensitive information carelessly

• Be a Paranoid, check the flag messages in your email

• Keep on your eyes to check mail in the inbox, sent, draft , and trash

• Always keep your correct mail setting

• Never use “one password for all” :p

• Changer your mail password regularly

• don’t use a “weak” security question

Q & A

• twitter : fl3xu5

• YM : fl3xu5

Thank you :)

social network security & backdooring email

Education