said by DarkReading :You've seen the ads on the Web: A service provider promises to "recover" lost passwords from your Webmail services, even if you've forgotten the log-on information or use multiple services. But if you look closer, you may notice something else: Those same services can also help you crack others' Webmail accounts.
Gunter Ollmann, chief security strategist at IBM's Internet Security Systems unit, published a
blog about the password cracking services on Monday, after doing some research on these legitimate-looking services. What he found might make you think twice about using Webmail services --
or at least think more carefully about what data you put into your Webmail messages. Source/full article: »