Printable View
I was reading this article: http://www.cnn.com/2003/TECH/interne....ap/index.html
And it occurred to me that the potential for social engineering is huge on this. Can you imagine poor Joe and Jane Smith being tricked into giving out their personal information because they thought they were one of the 10?!
Sheesh.
or even better - people flooding msim's servers setting up nadloads of new accounts trying to win the cash. 6 or 7 bot accounts from each ip....
Huh. The MSN website's pretty barren about details. I've been looking around for info on what to expect, so maybe it'd be easier to tell a real "You WIN!" message from a fake. I'm not finding a whole lot. Just that a link will be sent via IM to the winners.
Is it just me, or shouldn't info like who it's going to be from, what they're going to say and whatnot be a little more easily available, that way we can tell easier wether or not a web site sent to us is for real, or just an attempt at stealing passwords and credit card numbers?
Or maybe I just haven't spotted it yet.
I know MSN is gonna get hit with a lot of dummy accounts from people to better their chances at winning the money. and I was thinking the same thing MsMittens wrote
Quote:
Joe and Jane Smith being tricked into giving out their personal information because they thought they were one of the 10?!
Don't even need to use 'social engineering', just greed.Someone could set a msn account up witha nick like 'MSN Prize Patrol' and harvest all kinds of info from the greedy ones. (as most of us are--except me and you, and I'm not too sure about you.)Quote:
To qualify, people must fill out contest entries and upgrade to MSN Messenger 6.0. They also must be logged in to the service. MSN will notify the winners by instant messaging them.
Moxnix
'
so people are going to set up 5 or 6 fake accounts trying to improve their chances, then the fake "MSN Prize Patrol" guys will steal the same batch of names and ccnumbers 5 or 6 times. heh