As a former [malevolent] systems administrator having dealt with SPAM issues, part of the problem with Yahoo and Hotmail is their popularity, coupled with their ease of access. G-Mail seems a bit tougher, but I'm sure there will be some hacks there sooner or later. Direct access to the outbound mail server as a client allows you to bounce an E-mail off anything from a PC running Outlook, to an Internet-capable cell phone. Android phones require you to create a G-Mail account tied to the phone, which may be why G-Mail hasn't been hit yet (I'm still trying to get Outlook to connect and it has been fighting me every step of the way.)
Yahoo, Hotmail, AOL, MSN, and Earthlink have large numbers of E-mail addresses. Spammers are using computer E-mail generators to generate E-mail addresses and send random junk E-mail. Those that don't bounce are stored as valid. Now the fun begins. They run a password generator to try to bounce of the outbound mail server (often SMTP.[ISP Provider]) like you do with your smart phone. If successful, the junk E-mail is transmitted off the hacked E-mail address. I use Earthlink, and my son's account got hit; I immediately changed his password which fell into category 3 below.
The key things to do to prevent your address from becoming the next spam source is make your password more complex.
- Use at least 8 letters. You'd be surprised how many people have very short passwords.
- Include at least one number and at least one upper case letter. (many systems don't allow special characters, so you can use things like #@$< etc. but adding those makes it even more complex) That drastically increases the complexity of the password, even for a computer. Using just 8 completely random letters creates 208,827,064,576 single-case possibilities (26 to the 8th power.) Throw in mixed case and you go to 53,459,728,531,456 (52 to the 8th.) So, just using mixed case makes your password potentially 256 times more complex.
- Don't use simple words, pet's names, family members' names or nicknames, even if followed by numbers. These are easy cracks for a computer.
- Change your password at least every six months.
- Under no circumstances should you click a link included in an E-mail with some simple sentence/subject like "Hey, I found this great link" or "LOL."
I haven't received any junk mail spoofed against an address of any forum member. So far, they've been from Yahoo, Hotmail, and MSN.
By the way, Rule #1 -- The Forum Moderator is ALWAYS right. Even if the facts say otherwise, the Forum Moderator is ALWAYS right.