Earlier quoted context omitted.
Did Google stop offering a free tier for Apps For Your Domain? I guess I missed the part about being grandfathered in.
Yes. It's now $5/month/user. (plans are grandfathered however)
An Important Message About Yahoo User Security
61–70 of 356 posts
Re: An Important Message About Yahoo User Security
#62Earlier quoted context omitted.
Here is a script for the command line enthusiasts. #!/bin/bash EADDRESS=$([[ "$1" == "" ]] && echo "noreply@example.com" || echo "$1") EADDRESS=$(echo "$EADDRESS" | sed 's;@;%40;') RESPONSE=$( curl "https://heroic.com/wp-admin/admin-ajax.php" \ -H "accept-language: en-US,en;q=0.8" \ -H "accept-encoding: gzip, deflate, br" \ -H "user-agent: Mozilla/5.0 (KHTML, like Gecko) Safari/537.36" \ -H "content-type: application…
As long as I have you here... ;) I primarily write JS for a living but because I freelance I often have to work with wordpress. After spending a few weeks digging into the internals I soon realized that every single wordpress project I've inherited–paid themes included–were horrendous and failed to utilize the most basic facilities provided by core. In most of these projects a quick turnaround was more important than…
Re: An Important Message About Yahoo User Security
#63Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…
I have had good luck with fastmail.com, but at $30/year for the entry-level option it sits in what you classify as the "expensive" category. For a dedicated service with keen developers and ongoing product development (yay U2F support), great and accessible support, reasonable expectations of privacy, it has been well worth it. YMMV, of course.
Re: An Important Message About Yahoo User Security
#64Re: An Important Message About Yahoo User Security
#65using 2 Factor Authentication comes handy in situations like this.
Re: An Important Message About Yahoo User Security
#66That tops the HIBP list for the most stolen.[1]
Re: An Important Message About Yahoo User Security
#67Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…
Buying a domain name is the equivalent of number portability. Recommended for everyone.
I definitely took for granted how easy it is to say to someone "first initial + last name at major email provider . com", instead of "really easy first part at custom domain, wait let me give you the phonetic alphabet equivalent, no just the letter b, not actually the word bravo... . io - yes io, item oscar, it's the indian ocean. Yeah I'm sure it works"
Then pray you actually get the email.
Re: An Important Message About Yahoo User Security
#68Anybody know what hash they use at yahoo for account passwords?
for the longest time, it was unsalted MD5. it may still be. very easy to crack with a rainbow table.
The went on to say they have unactivated all clear text security questions.
Really, WTF Yahoo. Why bother hashing a pw if you are going to have plaintext security questions.
Though at least they were not using MD5
Re: An Important Message About Yahoo User Security
#69What's the difference between "may have" and "may not have" in this context?
It seems like they're saying anything could have been stolen.
Re: An Important Message About Yahoo User Security
#70Anybody know what hash they use at yahoo for account passwords?
I've been getting an "Unexpected sign-in attempt" email from Yahoo every day for the last couple of weeks, but I don't see any evidence that the attempts were successful.