Andre

People love to give away their usernames and passwords. That's the only explanation why I receive so many invitations from them to give away my personal data as well.

Common sense, a bit of questioning, the news, sometimes friends, parents, tech and support departments, they all warn us every day about the dangers of certain emails and web sites. Nevertheless, such black holes of personal data are so strong that many can't escape their gravity. Think of it like the fly that cannot escape the blue light that means certain death.

While you may partially forgive people falling for well-made phishing emails and web sites which look exactly like the original, it goes beyond any reason why so many voluntarily give up their privacy to sites which explicitly state on their front page that they WILL use the personal data for all things unwanted, such as spamming.

My latest invitation to join a service hungry for my data I received last night, sent through the Windows Live Messenger (formerly known as MSN Messenger). A message from a friend popped up, only containing a link to http://xxx.0sev.info (friend's name replaced with "xxx"). Let's take a closer look at their main page (looks same as the friend's username branded): www.0sev.info.

• Only "name" on the site: "pix for MSN friends v1.1c"
• Required: "please login with your MSN to continue..."
• Input fields: "MSN E-Mail" and "MSN Password"
• Best of all are the "Terms of Use / Privacy Policy" right below the login form. I've copied it below and added comments in bold to the best parts:

Terms of Use / Privacy Policy:

By filling out this form, you authorize TST Management, Inc to spread the word about this 100% real and upcomming Messenger Community Site.
You will receive your share of the credit in helping us spread the word.  This is a harmless Community site which is offering users a platform to meet each other for free. (who believes that?)

We do not share your private information with any third parties.
By using our service/website  you hereby fully authorize TST Management, Inc to send messages of a commercial nature via Instant Messages and E-Mails on behalf of third parties via the information you provide us. This is not a "phishing" site that attempts to "trick" you into revealing personal information. Everything we do with your information is disclosed here. If you are under eighteen (18), you MUST obtain permission from a parent or guardian before using our website/service.

This page is not affiliated with or operated by Microsoft(tm) or MSN Network(tm).

ANY LIABILITY, INCLUDING WITHOUT LIMITATION ANY LIABILITY FOR DAMAGES CAUSED OR ALLEGEDLY CAUSED BY ANY FAILURE OF PERFORMANCE, ERROR, OMISSION, INTERRUPTION, DEFECT, DELAY IN OPERATION OR TRANSMISSION, COMMUNICATIONS LINE FAILURE, SHALL BE STRICTLY LIMITED TO THE AMOUNT PAID BY OR ON BEHALF OF THE SUBSCRIBER TO THIS SERVICE. (in other words, "zero" - see further below "free service") 

We may temporarily access your MSN account to do a combination
of the following: (in other words, using your MSN contact list to spam everybody in your contact list; your contacts will love you for that)
1.  Send Instant Messages to your friends promoting this site.
2.  Introduce new entertaining sites to your friends via Instant Messages.

This is a free service. You will not be asked to pay at any time.
You will not be subscribed to anything asking for payment.
This service is made possible by many hours of human effort.

TST Management, Inc reserves the right to change the terms of use / privacy policy at any time without notice. To view the latest version of this privacy policy, simply bookmark this page for future reference. (who is ever doing that?)

You understand that this agreement shall prevail if there is any conflict between this agreement and the terms of use you accepted when you signed up with MSN. You also understand that by temporarily accessing your msn account, TST Management, Inc is NOT agreeing to MSN's terms of use and therefore not bound by them. (in other words, you give them free access to everything, you violate MSN rules, and everything will be in your liability in relation to MSN)

This agreement shall be construed and governed by the law of the republic of Panama. You expressly consent to the exclusive venue and personal jurisdiction of the courts located in the Republic of panama for any actions arising from or relating to this agreement. (do I really need to comment about this?)

If any provision of this agreement is held to be invalid, illegal or unenforceable for any reason, such invalidity, illegality or unenforceability shall not effect any other provisions of this agreement, and this agreement shall be construed as if such invalid, illegal or unenforceable provision had not been contained herein.

Copyright 2008 TST Management, Inc

It is important to mention that giving access to MSN / Windows Live accounts also gives access to the Windows Live ID (formerly known as Passport) account, which in turn gives access to a whole range of services, including Hotmail and Xbox Live (if gamertag is known).

Another - same - "legal phishing" site is MaxComments.com, also operated by the same company TST Management, Inc. That one targets the MySpace community.