181–190 of 356 posts
"encrypted or unencrypted security questions and answers" This is bad right? Like, worse than your hashed password and your mailing address. The only good thing is that if I ever implement security questions, I'll remember Yahoo! and how it could end up in the wrong hands.
Don't implement security questions. Those are no good to begin with.
Earlier quoted context omitted.
Yahoo has zero value as a web property. What value there is on the name and the advertising side.
> Yahoo has zero value as a web property What!? Surely you're being flippant. Alexa currently ranks Yahoo.com as #5 worldwide and in the United States. NUMBER 5! How anyone could think that has zero value makes no sense to me.
Wait, Yahoo believes the data was stolen by a "state-sponsored actor"! If they have such evidence, why don't they explain so? To me it looks like a tactic to put the focus on the "noughty" government instead of themselves. Anyway, it will be an interesting read (if ever written) how Yahoo discovered they had been stolen and by who (what state?). Also, if "the state" is finally behind this, who will they prosecute til…
a) Big US enterprises are under attack from state-sponsored actors on a daily basis, so it's not that weird. It's not like the NSA weren't caught with their hands in the cookie jar either. b) If you name the state you think is behind it, you better be ready for the diplomatic repercussions between the US government and the rogue state, as well as potentially stopping doing business in that state (see Google and China…
It's a quite interesting topic indeed.
Anyone happen to know if this was the largest hack in history?
[0] http://www.informationisbeautiful.net/visualizations/worlds-... [1] https://docs.google.com/spreadsheets/d/1Je-YUdnhjQJO_13r8iTe...
Earlier quoted context omitted.
The problem is that people give the right answers. Mother's maiden name? Mozilla. School? Mio Fit.
Weird. My mother's maiden name is AjhuZ52nzFyDXDom4h8Vw01 and my school is 3zJi&MsGpSHf%z$GbDW!ngs7
Moving email addresses out from one provider and creating another one is more difficult than moving phone numbers (in the latter case, number portability could help, if available). What exactly can an average/common end user do for such incidents, even if it is to avoid them in the future? I use different passwords across accounts, with all of them being somewhat complex or very complex. I have looked at a few differ…
Just because you move to a paid email provider doesn't mean that provider won't get hacked. In fact, the resources at larger companies like Google could provider better protection. Perhaps the benefit of being at a paid email provider is that they have a much smaller number of accounts, so they are a less attractive target for hackers.
Also, in case you have problems, it's impossible to reach Google's support, unless you're a Google Apps customer. It's also near impossible to reach Yahoo's support too. I know because I've been there. If you don't pay, you don't get any support.
"Better protection" is a fairy tail if you can't talk with somebody in case your email goes missing or in case you suspect you've been hacked.
Earlier quoted context omitted.
Nobody said they were active users.
I use Yahoo for fantasy sports. When I signed up I was forced to register a RocketMail account. Logging into Yahoo Fantasy is the only thing I've used it for. I wonder how many other people are in this scenario. Some hacker might have my password, hopefully they don't pull Aaron Rodgers from my line up this week.
Earlier quoted context omitted.
Nobody said they were active users.
I use Yahoo for fantasy sports. When I signed up I was forced to register a RocketMail account. Logging into Yahoo Fantasy is the only thing I've used it for. I wonder how many other people are in this scenario. Some hacker might have my password, hopefully they don't pull Aaron Rodgers from my line up this week.
It seems bizarre that Yahoo would use a post on tumblr.com to make such an important announcement. From what I've seen Tumblr has become mostly a wasteland of worthless garbage in the past few years and no one takes it seriously any more. Isn't this the sort of thing that ought to be on the yahoo.com home page from a PR crisis management standpoint?
If you don't know, they own Tumblr, so maybe it's a "dogfooding" practice.