windows-live-id
Latest
Windows Live login suggested as Xbox Live security flaw
Since reporting on the "FIFA hack" and related security concerns with Xbox Live and the Windows Live ID system, we've received stories, documentation and theories on how this is happening from dozens of victims. As we continue to follow up on several leads, Analoghype posits an interesting theory on how some of these breaches may be occurring. AH suspects that the hackers grab gamertags from a game of Halo or Call of Duty, then Google the tags to find associated emails on social networking sites. They now have a potential list of Windows Live IDs. Going to Xbox.com, the hacker can now test if the email is a valid ID by attempting to sign in. An error message of "account is invalid" has them moving on to another email; "password is incorrect" means they've got a real account, but a bad password.
Xbox Live 'FIFA hack' concerns continue to escalate, Microsoft states Windows Live ID not compromised
Additional reporting provided by Xav de Matos, Senior Editor for Shacknews. Following an increasing occurrence of Xbox Live account hack reports, we are growing concerned over Microsoft's Windows Live ID system, the only layer of protection between a hacker gaining access to a person's Xbox Live account and their information. In our research, the only consistency we saw across users who were hacked was the general inconsistency of what email and payment method was used on their account. Hotmail, Gmail and school emails were used for their Windows Live ID, while payment methods used were credit cards and PayPal. Other than a compromised Windows Live ID, there wasn't a common thread we could identify. It's been several months since we started following the "FIFA hack," a rather blunt scam that saw Xbox Live accounts drained so thieves could purchase in-game FIFA 12 'Ultimate Team' cards for use and sale. We have been tracking the FIFA issue and following up on other tips that weren't necessarily rooted in the FIFA hack, but related in that users saw exploitation of payment methods tied to their account. A recent Shacknews editorial detailed accounts compromised by the FIFA exploit.
Microsoft reveals 48-hour 'secret access' to Age of Empires Online beta
Yearning for an early look at Age of Empires Online? If so, Microsoft Game Studios has some good news for you. Starting today, you can jump into a 48-hour secret access beta signup session simply by registering for a Windows Live ID (or logging in if you already have one). This is your last chance to get in on some Age of Empires beta action before MGS closes it to the public, so hurry and visit the signup link before Saturday, May 7th. You'll be able to download the beta client immediately and get started testing shortly thereafter. If you missed our beta key giveaway a couple of weeks ago, don't miss what could be your last opportunity to take part in the upcoming MMORTS' testing phase!
MS 'actively working' on linking Gamertags to new Windows Live IDs
Is that Tilda Swinton in the middle? Having amassed an impressive Gamerscore by slogging through Cabela hunting games, forgettable anime beat-em-ups and the last Iron Man game, it's no surprise that Xbox Live users become agitated when their Gamertags are placed in jeopardy. Earlier this week, it was reported that Windows Live IDs linked to dormant email addresses were at risk of deletion, taking associated Gamertags with them.However, Microsoft has clarified the situation, noting, "People with dormant Windows Live IDs can continue to enjoy the benefits of their Xbox LIVE Gamertags on their Xbox 360 consoles, including earning Achievements; however, they will not be able to use their expired Windows Live IDs for activities such as account management on xbox.com." According to a company representative, "An Xbox LIVE Gamertag is unrecoverable from the system only when the associated Windows Live ID has become dormant and the Gamertag has been deleted from all Xbox 360 consoles." In other words, a dead Windows Live ID will prevent you from recovering your Gamertag online should you change consoles or attempt account management, such as renewing your Xbox Live subscription. Microsoft is "actively working" on a solution that should allow you to sever the dead weight of an expired Windows Live ID and link your Gamertag to a new one. In the meantime, Major Nelson recommends you log into your Windows Live ID (do it through xbox.com) at least once every four months. Think of it as an insincere pleasantry with long-term benefits -- like visiting your mother-in-law.
Live ID lameness rears ugly head once more
If your gamertag is saddled with a Hotmail or MSN email address, you may know of the unbreakable bond between them. Discovered long ago, it is impossible to associate your gamertag with a new email address if your Windows Live ID was automatically created by a Microsoft site like Hotmail or MSN. Before, it was a minor annoyance, as it forced many to maintain an email address they had long since abandoned. Now, with the release of Live Messenger integration on the 360, it's become a serious nuisance.
Pre-texting the cause of Xbox Live account issues
Earlier this week news broke of a supposed Xbox Live hack which ultimately turned out to be false, but we still didn't have specific answers. But Major Nelson, being the detective he is, dug deeper into the peculiar account hijacks and discovered what really happened. With the help of security researcher Kevin Finisterre Microsoft learned that the problem was nothing more than human error caused by the process of pre-texting. Pre-texting happens when individuals (those l33t haxorz) call customer support and "trick" them into giving out confidential account information. So, it wasn't as widespread as we all thought or due to some mysterious techie Windows Live ID account hack. It was just a few customer support reps being tricked into giving out account information. Don't fret though, Microsoft is committed to re-training their reps with the knowledge of this incident and hopes to prevent any further pre-texting headaches.Gold star goes to Microsoft for acknowledging the problem, finding its source, and taking steps to correct it. As we all know, it takes a real man to admit he is wrong, but it takes a bigger man to fix his mistakes. Be safe kids!
Some Xbox Live accounts hacked [update 1]
Over the weekend a group of hackers hijacked Windows Live IDs through Bungie.net and supposedly took over all accounts associated within those IDs. ZDNet.com compiled a list of sources who are confirming such hacks after a security researcher over at Digital Munition released a full disclosure report. ZDNet.com then received emails from Xbox Live members confirming that their accounts have been taken over and that everything from fraudulent charges on their account to password changes occurred. So far Microsoft has somewhat admitted to the problem, but hasn't been overly helpful. There has been no official word from Microsoft, but in a phone conversation with a Xbox Live Tech they said that "hackers have control of Xbox live and there is nothing we can do about it".Have you noticed anything screwy with your Xbox Live account or Windows Live ID? So far we haven't heard anything from the fanboy community, making us believe this is a much more isolated problem then ZDNet.com makes it appear. But we definitely think Microsoft needs to either come out and admit to the problem and tell us what happened or squash this over-zealous rumor. This whole hacking problem further begs the question; why can't hackers and gamers live in harmony?Update 1: This mystery has been solved![Via Digg]
