Live data from Hacker News

The Ashley Madison Database Was Leaked

krebsonsecurity.com

21–30 of 527 posts

Re: The Ashley Madison Database Was Leaked

#21

Who know unless you had a profile there. One thing I found interesting was the suggestion from one of the comments that AM might be the ones dumping all the fake databases. If so this is a pretty clever strategy to try and hide a needle in a pile of needles.

Just as likely all the scammers and malware distributors in the world are also getting in on the act.

Re: The Ashley Madison Database Was Leaked

#23
Since this is a big story it seems reasonable to have a thread about it—people are going to keep posting these anyhow. Since we have no idea which URL is the most substantive one, we'll leave this one as is. If anybody finds a link that's significantly better, we can change it.

Since the consensus is now that the leak is real, we'll change the title to reflect that.

Re: The Ashley Madison Database Was Leaked

#25
This is my first time to learn about Ashley Madison. The business model actually disgusts me. I get the whole open relationship, but people who are actually married or in a committed relationship are using this site is just ridiculous. Either you break off with your current relationship, or stay loyal.

BTW, those "secure" logo are just so useless I see them as sign of weakness rather than confidence. Anyone can place a secure logo or verified logo on their homepage and pretend.

Re: The Ashley Madison Database Was Leaked

#26
That's the only way this can go. The company has three options:

- Confirm that this (or any of the dumps) is the data. This almost definitely opens them up to lawsuits coming from a bunch of people who have little to lose. I say "little to lose" because a non-trivial number will be on the verge of divorce about to lose half of everything.

- Keep their mouths shut and confirm/deny nothing. The press will continue on the story until they're bored and move along but that could be a long time because of the names and information involved.

- Deny that this (or any of the dumps) is the data. All they have to do is keep planting the seed of doubt and some portion of the press will hesitate publishing names because they don't want to look like idiots and/or open themselves up to lawsuits. Because of course anyone with an axe to grind will make sure their opponent (or boss or whatever) is listed in one of the dumps to target them. Further, this shields some of their customers and gives those customers' divorce attorney's a "plausible" scenario to fight against.

All of that said, I wonder if there's some way to validate some of the accounts with the site. If you can do that with some of the leaked data, you may be able to prove that some portion of the data set is real..

Re: The Ashley Madison Database Was Leaked

#27
post #19

Krebs has since updated his post with confirmation from three independent Ashley Madison users confirming their data was in the leak. It looks like this was the real deal.

Interestingly, the three people say the last digits of their credit card numbers were included in the dump, while the Ashley Madison CTO says they don't keep credit card numbers, full stop.

Re: The Ashley Madison Database Was Leaked

#28

That's the only way this can go. The company has three options: - Confirm that this (or any of the dumps) is the data. This almost definitely opens them up to lawsuits coming from a bunch of people who have little to lose. I say "little to lose" because a non-trivial number will be on the verge of divorce about to lose half of everything. - Keep their mouths shut and confirm/deny nothing. The press will continue on t…

Given that the dump is straight mySQL dumps, nicely including geolocation data, emails, IP addresses, birth dates, and so on, I fully expect that at this very moment there are people loading servers and building search apps that will allow you to map a location or search corporate IP spaces, etc. It is inevitable, however gray the legalities are. These services are going to start appearing tomorrow with certainty, and they're going to get attention.

And we know already that there is a lot of confirmed data in there. At least some of the data is unequivocally true, and the data in this latest release feels very organic.

Re: The Ashley Madison Database Was Leaked

#29
I just read this article!! Hot news changes quickly. Originally they were debating the data since many dumps were fake but...now it's been updated less than an hour ago. Verified from Krebs three separate sources.

Wow. Bummer. Illegal. Shameful. And could get painful.

Re: The Ashley Madison Database Was Leaked

#30
post #19

Krebs has since updated his post with confirmation from three independent Ashley Madison users confirming their data was in the leak. It looks like this was the real deal.

Interestingly, the three people say the last digits of their credit card numbers were included in the dump, while the Ashley Madison CTO says they don't keep credit card numbers, full stop.

Storing the final digits complies with the CC requirements, to my knowledge. I mean, every online store happily shows me my final four digits. So it could just be confusion about what they mean.

Having said that, Ashley Madison has approximately zero credibility, so whatever their agents say is open to intense skepticism.

Post reply on HN