Re: [Full-disclosure] Xbox live accounts are being stolen (is thetraining working?)

This list is about Full Disclosure, exploits vulnerabilities etc.

Noone gives a rat arse whether some whiny n00bz cant play Halo.

Find another list to gripe about customer service issues.

Futhermore there isnt any proof provided that ppl didnt get compromised by getting phished themselves. I'm sure the same mindless twitz that are whinning here have to have a myspace account spilling all their personal information anyway.


----- Original Message -----
From: Kevin Finisterre (lists) [mailto:kf_lists@xxxxxxxxxxxxxxxxxxx]
To: scothir@xxxxxxxxxxxxx
Cc: full-disclosure@xxxxxxxxxxxxxxxxx,amwilson85@xxxxxxxxx
Sent: Thu, 9 Aug 2007 11:44:50 -0400
Subject: Re: [Full-disclosure] Xbox live accounts are being stolen (is thetraining working?)

Which is fine... I was more than anything pointing out that this
individual still chose to ignore company policy. And being
stereotypical it sounded like the *same* call center I called into
before, so if she is doing it I am sure others are as well. Hopefully
she had minimal access to personal data.

And I guess I was also highlighting the fact that no one was really
paraded around for us to tar and feather for stealing accounts. Did
you guys actually catch someone or did they get off Scott free?
This issue had honestly been out of my mind for some time, I was
quite surprised to hear of it happening again.

On Aug 9, 2007, at 11:26 AM, Scott Hirnle wrote:

Hi Kevin,

For Hardware calls, we don't verify the same information as we do
on Live calls. The reason for this is because some people (in fact
many people) who call into the hardware queue are not even Xbox
Live customers. Therefore, they don't have the same data to verify
against and as a result, our agents don't have visibility into it
and our entitlement process is different for each line of business.


-----Original Message-----
From: Kevin Finisterre (lists) [mailto:kf_lists@xxxxxxxxxxxxxxxxxxx]
Sent: Thursday, August 09, 2007 8:21 AM
To: full-disclosure@xxxxxxxxxxxxxxxxx
Cc: Ashley Wilson
Subject: Re: [Full-disclosure] Xbox live accounts are being stolen
(is the training working?)

I find it kind of ironic that my Xbox broke last night after an
update and I am now on the phone with a Xbox live representative.
After the whole stolen accounts fiasco I remember calling in an
having techs flat out refuse to work with you until you verified your
full name, address, phone number, gamer tag, xbox console serial
number and email address used on the account.

I just finished talking to a tech about my xbox after only giving her
my First name, Address and Phone number (I couldn't give my serial
because my xbox is not near me). After asking to speak with her
supervisor about some other issues I asked him to remind me of what
information should be verified prior to speaking with someone. He
told me that "First and Last name, Address, Phone Number, Email and
Serial Number had to be verified and if any one item was missing or
not available to be verified via other means" then they have been
instructed to not speak with you. I asked him what happened with
Gamertag verification and he stated that only applied to Xbox live
issues and it was not verified for Xbox console issue. I didn't
bother telling him the tech that passed me on to him didn't quite
verify all the data, I simply said thanks and hung up.

At the very least this may help illustrate that no amount of training
can fully curb human behavior. The tech I talked to had no problem
ignoring the lack of serial number and email address on my account.
So Ashley... yeah I guess it is entirely possible that accounts *can*
still be stolen. Hell for all I know it could be the same kids since
no one was ever produced as the culprit of the previous caper.

Good luck!

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -