The Basics of Internet Security
Like a swarm of locusts, invading some of the Yahoo mailing lists I'm subscribed to are emails generaged by "grouply.com". Grouply professes to help you organize your Yahoo groups into one place. All you need to do is give Grouply your Yahoo signin and password. I haven't looked close enough to see how the site organizes the data.
A good rule of thumb: If a website asks for login information for some other site, then that website shouldn't be trusted.
What Grouply is doing is generating emails, through the user's account, to all of the groups that that user is subscribed to. The emails go out in your name and are superficially indistinguishable from legitimate messages from you. Of course, a small percentage of users also sign up and the emails start all over again.
I frequently receive stupid emails from various sites because someone I spoke to once (and allowed to list me on his buddy list, hello, Yahoo, you need to offer a way to revoke this) keeps giving his login information to different websites and they now have a list of Yahoo members to add to their spam lists.
And, of course, if you use the same password everywhere, well, you're giving already questionable people access to your entire life.
I can think of a small number of trustworthy sites that I might say "Yeah, they're ok" (FaceBook's Friend Finder, MeeBo.com's web based IM client). But at least understanding the risk before giving away the keys is important.
*puts soap box away*
A good rule of thumb: If a website asks for login information for some other site, then that website shouldn't be trusted.
What Grouply is doing is generating emails, through the user's account, to all of the groups that that user is subscribed to. The emails go out in your name and are superficially indistinguishable from legitimate messages from you. Of course, a small percentage of users also sign up and the emails start all over again.
I frequently receive stupid emails from various sites because someone I spoke to once (and allowed to list me on his buddy list, hello, Yahoo, you need to offer a way to revoke this) keeps giving his login information to different websites and they now have a list of Yahoo members to add to their spam lists.
And, of course, if you use the same password everywhere, well, you're giving already questionable people access to your entire life.
I can think of a small number of trustworthy sites that I might say "Yeah, they're ok" (FaceBook's Friend Finder, MeeBo.com's web based IM client). But at least understanding the risk before giving away the keys is important.
*puts soap box away*
