Xbox Live GM responds to Live security concerns

4.6
On the occasion of "Safer Internet Day" (what?) Xbox Live General Manager Alex Garden posted a letter in response to the ongoing Xbox Live security concerns, including the FIFA hack and Windows Live exploit.

Garden attributed the problems to social engineering, phishing, keylogging software, and other reasons not endemic to Xbox or Microsoft. "While we here at Xbox have no evidence of a security breach in the Xbox LIVE service," he said, "that is of little comfort to our members whose accounts have been compromised by malicious and illegal attacks."

He recommended personal security measures to guard against this, including adding additional verification methods to your account "and reducing the amount of personal information shared online or through social networks." Additional proof helps guard your info, he said, and also makes it easier for Microsoft to investigate cases and issue refunds. "We still have a few cases that are taking longer to fully recover and some refunds are still being processed," he said, "but we're making great strides. We hope our customers are experiencing the improvements firsthand."

Posted:

Source: http://www.joystiq.com/2012/02/07/xbl-gm-responds-to-live-security-concerns/#comments

Comments

"Xbox Live GM responds to Live security concerns" :: Login/Create an Account :: 19 comments

If you would like to post a comment please signin to your account or register for an account.

JrichardsPosted:

I you can get hacked

TheBrownGuyPosted:

Just dont give out your personal info and you should be fine in most cases

iToXiCPosted:

Dr-Keyser
Hexicidal
Dr-Keyser O K !

I'm going to help everyone here....

They cannot just randomly "HACK" you unless they have a program that stole your password because YOU typed it... that is the only way you can be hacked... Microsoft point generators are not real and there are rarely any legitimate Gamer-tag changers.

I hope I reassured everyone on this topic.


That is getting phished.

Other than that you don't know what you are talking about.


No getting phished is entering your information on a site that is claiming to either promote free items, or a replica of a trusted site... I was explaining in this post that if you download something that is promising free items then you are probably going to download a remote access Trojan which will go completely undetected until the person behind the program shutting down your computer and opening up your files on your screen encrypting a permanent win32 worm.bat (My Virus) into your files...

Do I still not know what I'm talking about? Child please.. when Runescape phishing first started... I phished and RATted over 10b in 2 months...


Which is what he was talking about...

Anyways, I was randomly hacked on one of my old accounts, but only because the password was "secret." I know that I didn't give it out, I'm not dumb, but I made the pass a long time ago

Necklace_JrPosted:

Hexicidal
Dr-Keyser O K !

I'm going to help everyone here....

They cannot just randomly "HACK" you unless they have a program that stole your password because YOU typed it... that is the only way you can be hacked... Microsoft point generators are not real and there are rarely any legitimate Gamer-tag changers.

I hope I reassured everyone on this topic.


That is getting phished.

Other than that you don't know what you are talking about.


No getting phished is entering your information on a site that is claiming to either promote free items, or a replica of a trusted site... I was explaining in this post that if you download something that is promising free items then you are probably going to download a remote access Trojan which will go completely undetected until the person behind the program shutting down your computer and opening up your files on your screen encrypting a permanent win32 worm.bat (My Virus) into your files...

Do I still not know what I'm talking about? Child please.. when Runescape phishing first started... I phished and RATted over 10b in 2 months...

SparkiesPosted:

Playstation
Sparkies
AuntJemima
TTG_Crysis How about this... The only way you are going to lose your account is if you type your information anywhere publicly or malicously. Mostly its little kids downloading fake MSP generators or stupid crap like that. Yes people do disguise them pretty well to where they look legit, but truthfully none work. All it takes is common sense, dont download crap that requires emails, names, or passwords and your okay. There is practically no other way to get your information unless you are a skilled hacker and can do all that IP and decryption crap. A good way to help this is to first thing when you join xbox live, have a warning agaist these things that you are forced to read, it would work perfect.

I agree, people complain about bad security but its really them or their child's fault for the problem. You don't just randomly get and email and password unless your a really skilled hacker. and if your that good, you would be trying to do much bigger things then trying to steal a kids Xbox account. the victim must be giving some info out that shouldn't be given out. If you have common sense and don't fall for dumb schemes,then you'll be safe. its as simple as that...

You don't have to be skilled to steal a kid's account on XBL. All you need is to know there IP. Then there's two ways you can check for open ports on there IP then check there logs (IF you know how to) The other way is more popular which is a simple ****, Find there email and steal it, and if you got there email you can fish there pass. BTW I know what I'm talking about I'm a grey hat :D. Ohh yea btw most kids get there accounts stole for talking **** to people they shouldn't like me.


If you are in a game with a "hacker" I doubt he/she would know which is IP yours since there would be like 10/11 other people in your game. (Call of Duty, Halo, and Battlefield)

Now if you are in a party with the "hacker" you should not be.
People can get your IP Address(es) through a Xbox Live Party Chat, so be careful.

I never heard of "hacking" a user with just an IP Address.

You can do malicious and illegal things with their IP Address which I will not discuss or furthermore talk about.

Hacking someone with their IP Address, probably unlikely.

You may be right, I do not know.

You are correct, Since most IP grabbers such as Cain or Commview grab every IP that is sending packets to your IP, You will grab everyone that is with your victim. But if you can get him to join you in a "Party Chat or somewhere where you can obtain his IP and only his" you will be able to scan his IP for open ports. If he has any vulnerabilities there, You will find a lot of options on what you can do with them. Such as one is reading there logs containing valuable info.

SparkiesPosted:

TTG_Crysis
Sparkies
AuntJemima
TTG_Crysis How about this... The only way you are going to lose your account is if you type your information anywhere publicly or malicously. Mostly its little kids downloading fake MSP generators or stupid crap like that. Yes people do disguise them pretty well to where they look legit, but truthfully none work. All it takes is common sense, dont download crap that requires emails, names, or passwords and your okay. There is practically no other way to get your information unless you are a skilled hacker and can do all that IP and decryption crap. A good way to help this is to first thing when you join xbox live, have a warning agaist these things that you are forced to read, it would work perfect.

I agree, people complain about bad security but its really them or their child's fault for the problem. You don't just randomly get and email and password unless your a really skilled hacker. and if your that good, you would be trying to do much bigger things then trying to steal a kids Xbox account. the victim must be giving some info out that shouldn't be given out. If you have common sense and don't fall for dumb schemes,then you'll be safe. its as simple as that...

You don't have to be skilled to steal a kid's account on XBL. All you need is to know there IP. Then there's two ways you can check for open ports on there IP then check there logs (IF you know how to) The other way is more popular which is a simple ****, Find there email and steal it, and if you got there email you can fish there pass. BTW I know what I'm talking about I'm a grey hat :D. Ohh yea btw most kids get there accounts stole for talking **** to people they shouldn't like me.
Just GTFO. The only way your Account is going to get "Hacked" is if you put your account info everywhere. Oh, and it's not as simple as getting a IP, your login details don't travel through a IP all day long. And open Port? Stop trying to act smart when your not.

Lol no need to rage kid. If you know how to scan for open ports on an IP you can easily find there logs. If your stupid enough to not know how to clear them you can easily find any password they've used. I'm done lol. Believe it or not i do know what I'm talking about since I got more bots/shells/VPS/VPN/Proxies/Keyloggers/Rats/Slaves, probably defaced more websites then the post you got no life. So since you don't probably know what i'm talking about your gonna rage at me for feeling stupid.

ResolutePosted:

Sparkies
AuntJemima
TTG_Crysis How about this... The only way you are going to lose your account is if you type your information anywhere publicly or malicously. Mostly its little kids downloading fake MSP generators or stupid crap like that. Yes people do disguise them pretty well to where they look legit, but truthfully none work. All it takes is common sense, dont download crap that requires emails, names, or passwords and your okay. There is practically no other way to get your information unless you are a skilled hacker and can do all that IP and decryption crap. A good way to help this is to first thing when you join xbox live, have a warning agaist these things that you are forced to read, it would work perfect.

I agree, people complain about bad security but its really them or their child's fault for the problem. You don't just randomly get and email and password unless your a really skilled hacker. and if your that good, you would be trying to do much bigger things then trying to steal a kids Xbox account. the victim must be giving some info out that shouldn't be given out. If you have common sense and don't fall for dumb schemes,then you'll be safe. its as simple as that...

You don't have to be skilled to steal a kid's account on XBL. All you need is to know there IP. Then there's two ways you can check for open ports on there IP then check there logs (IF you know how to) The other way is more popular which is a simple ****, Find there email and steal it, and if you got there email you can fish there pass. BTW I know what I'm talking about I'm a grey hat :D. Ohh yea btw most kids get there accounts stole for talking **** to people they shouldn't like me.


If you are in a game with a "hacker" I doubt he/she would know which is IP yours since there would be like 10/11 other people in your game. (Call of Duty, Halo, and Battlefield)

Now if you are in a party with the "hacker" you should not be.
People can get your IP Address(es) through a Xbox Live Party Chat, so be careful.

I never heard of "hacking" a user with just an IP Address.

You can do malicious and illegal things with their IP Address which I will not discuss or furthermore talk about.

Hacking someone with their IP Address, probably unlikely.

You may be right, I do not know.

TTG_CrysisPosted:

Sparkies
AuntJemima
TTG_Crysis How about this... The only way you are going to lose your account is if you type your information anywhere publicly or malicously. Mostly its little kids downloading fake MSP generators or stupid crap like that. Yes people do disguise them pretty well to where they look legit, but truthfully none work. All it takes is common sense, dont download crap that requires emails, names, or passwords and your okay. There is practically no other way to get your information unless you are a skilled hacker and can do all that IP and decryption crap. A good way to help this is to first thing when you join xbox live, have a warning agaist these things that you are forced to read, it would work perfect.

I agree, people complain about bad security but its really them or their child's fault for the problem. You don't just randomly get and email and password unless your a really skilled hacker. and if your that good, you would be trying to do much bigger things then trying to steal a kids Xbox account. the victim must be giving some info out that shouldn't be given out. If you have common sense and don't fall for dumb schemes,then you'll be safe. its as simple as that...

You don't have to be skilled to steal a kid's account on XBL. All you need is to know there IP. Then there's two ways you can check for open ports on there IP then check there logs (IF you know how to) The other way is more popular which is a simple ****, Find there email and steal it, and if you got there email you can fish there pass. BTW I know what I'm talking about I'm a grey hat :D. Ohh yea btw most kids get there accounts stole for talking **** to people they shouldn't like me.
Just GTFO. The only way your Account is going to get "Hacked" is if you put your account info everywhere. Oh, and it's not as simple as getting a IP, your login details don't travel through a IP all day long. And open Port? Stop trying to act smart when your not.

SparkiesPosted:

Dr-Keyser O K !

I'm going to help everyone here....

They cannot just randomly "HACK" you unless they have a program that stole your password because YOU typed it... that is the only way you can be hacked... Microsoft point generators are not real and there are rarely any legitimate Gamer-tag changers.

I hope I reassured everyone on this topic.

Seem's like you don't know what your talking about. You can randomly hack anyone by just knowing there IP. Unless your smart and are on a Proxy chain (Like me) or a VPN (Like me). If you want to be protected I suggest getting a VPN and connect through it on xbox. Second don't download anything stupid like a generator I can guarantee you it's a RAT or Keylogger.(Probably mine LOL).

SparkiesPosted:

AuntJemima
TTG_Crysis How about this... The only way you are going to lose your account is if you type your information anywhere publicly or malicously. Mostly its little kids downloading fake MSP generators or stupid crap like that. Yes people do disguise them pretty well to where they look legit, but truthfully none work. All it takes is common sense, dont download crap that requires emails, names, or passwords and your okay. There is practically no other way to get your information unless you are a skilled hacker and can do all that IP and decryption crap. A good way to help this is to first thing when you join xbox live, have a warning agaist these things that you are forced to read, it would work perfect.

I agree, people complain about bad security but its really them or their child's fault for the problem. You don't just randomly get and email and password unless your a really skilled hacker. and if your that good, you would be trying to do much bigger things then trying to steal a kids Xbox account. the victim must be giving some info out that shouldn't be given out. If you have common sense and don't fall for dumb schemes,then you'll be safe. its as simple as that...

You don't have to be skilled to steal a kid's account on XBL. All you need is to know there IP. Then there's two ways you can check for open ports on there IP then check there logs (IF you know how to) The other way is more popular which is a simple dox, Find there email and steal it, and if you got there email you can fish there pass. BTW I know what I'm talking about I'm a grey hat :D. Ohh yea btw most kids get there accounts stole for talking shit to people they shouldn't like me.