Live data from Hacker News

An Important Message About Yahoo User Security

yahoo.tumblr.com

11–20 of 356 posts

Re: An Important Message About Yahoo User Security

#12

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

Zoho has a free, ad-free service¹ that allows: 1 domain, 5GB per user e-mail hosting, and 5GB per user document storage for up to 25 users. Pricing seems reasonable beyond that. They provide incentives in the form of additional users for referrals (my referral code: WX7yxEKy). They also support 2-factor authentication.

¹ https://www.zoho.com/mail/zohomail-pricing.html

Re: An Important Message About Yahoo User Security

#13

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

[deleted]

Re: An Important Message About Yahoo User Security

#14

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

Buying a domain name is the equivalent of number portability. Recommended for everyone.

Re: An Important Message About Yahoo User Security

#15

You can verify if your credentials have been compromised at https://heroic.com

Is your service any better than haveibeenpwned.com ?

HIBP is a great service and was the first one on the scene. HEROIC has more breached records than HIBP and with a free account on HEROIC you can see more details about how you have been compromised along with better search capabilities.

Re: An Important Message About Yahoo User Security

#16

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

https://www.namecheap.com/hosting/email.aspx

I personally use Gmail as an IMAP client for my domain's mailbox. I get the convenience of webmail + the ability to move my data elsewhere if I wish to.

Re: An Important Message About Yahoo User Security

#17
post #12

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

Zoho has a free, ad-free service¹ that allows: 1 domain, 5GB per user e-mail hosting, and 5GB per user document storage for up to 25 users. Pricing seems reasonable beyond that. They provide incentives in the form of additional users for referrals (my referral code: WX7yxEKy). They also support 2-factor authentication. ¹ https://www.zoho.com/mail/zohomail-pricing.html

Zoho is mostly OK though they have had a few outages in the past year and the IMAP flakes every now and then. But for free, it works.

My fallback were I to move my group off Zoho to something paid would probably be Rackspace. ymmv

Re: An Important Message About Yahoo User Security

#18

Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…

Moving to a new email address (and taking all your existing mails with you to the new inbox) is actually far easier than changing phone numbers.

Almost all (old) providers let you set up a mail forwarding (to the new provider). But even better, several services let you set up some fetchmail-like program where it imports all the messages from the old provider, e.g. via POP3 or IMAP, and even deletes them with the old provider, if you want.

Nevertheless, I fully agree with you that email services are much too expensive. Given the current market prices, Fastmail, for example, is great and worth its money.

We're told to spend some money on good quality software and services.

But: If I (and even more so the average non-technical user) pay 99 USD/year for Dropbox, 50 USD/year for Fastmail (because you want your own domain), 10 USD/year for the actual domain (separately), 100 USD/year for my quality newspaper subscription, etc. -- and all this is just for one person in my famile (i.e. me) -- you soon end up not having enough money for the "real" things in life.

Re: An Important Message About Yahoo User Security

#20

You can verify if your credentials have been compromised at https://heroic.com

Here is a script for the command line enthusiasts.

    #!/bin/bash
    EADDRESS=$([[ "$1" == "" ]] && echo "noreply@example.com" || echo "$1")
    EADDRESS=$(echo "$EADDRESS" | sed 's;@;%40;')
    RESPONSE=$(
        curl "https://heroic.com/wp-admin/admin-ajax.php" \
        -H "accept-language: en-US,en;q=0.8" \
        -H "accept-encoding: gzip, deflate, br" \
        -H "user-agent: Mozilla/5.0 (KHTML, like Gecko) Safari/537.36" \
        -H "content-type: application/x-www-form-urlencoded; charset=UTF-8" \
        -H "referer: https://heroic.com/email-security/" \
        -H "x-requested-with: XMLHttpRequest" \
        -H "origin: https://heroic.com" \
        -H "authority: heroic.com" \
        --data "action=heroic_scan_email" \
        --data "data[email]=${EADDRESS}" \
        --compressed --silent
    )
    if command -v php &> /dev/null; then
        php -r "print(json_encode(unserialize(urldecode('${RESPONSE}'))));"
    fi
PS: Using serialized data is a bad idea: https://www.owasp.org/index.php/PHP_Object_Injection
Post reply on HN