Two Plus Two Older Archives

Two Plus Two Older Archives (http://archives2.twoplustwo.com/index.php)
-   Software (http://archives2.twoplustwo.com/forumdisplay.php?f=43)
-   -   card spyware on ebay (http://archives2.twoplustwo.com/showthread.php?t=407374)

Glitch 12-29-2005 09:18 PM

card spyware on ebay
 
Check out this link http://cgi.ebay.com/ws/eBayISAPI.dll...tem=5848400172

anyone think it will sell ?

OrcaDK 12-29-2005 09:29 PM

Re: card spyware on ebay
 
Probably, there are so many stupid people in this world.

New York Jet 12-29-2005 09:30 PM

Re: card spyware on ebay
 
I'm sure it will. I often spend $1,200 when the seller has one feedback. Sounds legit to me.

Glitch 12-29-2005 10:08 PM

Re: card spyware on ebay
 
looks like he yanked it

12-29-2005 11:20 PM

Re: card spyware on ebay
 
[ QUOTE ]
I'm sure it will. I often spend $1,200 when the seller has one feedback. Sounds legit to me.

[/ QUOTE ]

1 feedback on his Blue Oyster Cult T-Shirt which he needs to sell so he can deposit to use and test his L33t software?

Buckmulligan 12-30-2005 01:48 AM

Re: card spyware on ebay
 
Forgive me for not being that technologically savy, but how and why unrealistic is the possibility of a program like this working?

12-30-2005 02:41 AM

Re: card spyware on ebay
 
[ QUOTE ]
Forgive me for not being that technologically savy, but how and why unrealistic is the possibility of a program like this working?

[/ QUOTE ]

It's not unrealistic, but it is unlikely.

The program is conceptually similar to a keystroke logger and there are plenty of those around. Just as with keystroke loggers, you have to trick somebody into installing the thing. You are probably committing a serious criminal offense when you do this. But if you're willing to take that risk, there are many ways to accomplish it technically.

The (significant) difficulty, relative to a traditional keystroke logger, lies in the time-value of the information. A keystroke logger can identify (e.g.) likely credit card numbers and deliver them in one of several ways (post them anonymously to a chat group or forum, etc.) The information is valuable for weeks, months or longer. This greatly increases the number of delivery options, decreasing the risk of being detected.

This software would have to deliver the hole cards in "real-enough" time, which pretty much dictates that it make an outbound TCP connection to some port where you'd have a listener to pick them up. Attempting this outbound connection would trigger the victim's firewall program, if s/he had one. In addition, the program has to connect to a specific IP address, which would become evidence in the federal prosecution after you got caught.

My $.02
Jeff


All times are GMT -4. The time now is 02:34 AM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2021, vBulletin Solutions Inc.