Live data from Hacker News

An Important Message About Yahoo User Security

yahoo.tumblr.com

201–210 of 356 posts

Re: An Important Message About Yahoo User Security

#201
post #107

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Investors are conflicted: on the one hand, Yahoo had a data breach that will cost them trust, but on the other hand, investors are surprised to hear there are still 500 million Yahoo users.

Conflicted?

Re: An Important Message About Yahoo User Security

#202

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Almost all of Yahoo's value is in its Alibaba holding. https://www.bloomberg.com/view/articles/2015-12-02/yahoo-is-... "Yahoo's actual core business of being Yahoo (and Tumblr and whatever) is worth negative $13 billion" "Even after deducting 38 percent from the value of [the Alibaba shares] to account for taxes, you get a value for Yahoo's actual business of just $1.7 billion"

Actually the part you elide is technically not [the Alibaba shares] but [the Alibaba and Yahoo Japan] shares. But it doesn't really weaken your argument as much as it seems to be, because Yahoo Japan is really separate from Yahoo, despite the name.

Re: An Important Message About Yahoo User Security

#203

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

YHOO is being bought by Verizon. The stock price will not move out of a fixed range.

Hm, I didn't know that. It's mildly funny, because the company that owns Sprint (Softbank, who recently bought ARM) also owns Yahoo Japan.

Re: An Important Message About Yahoo User Security

#204

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Isn't this news old though? The original news was from Aug. Today, they are just confirming that it was accurate.

Original news: http://www.bbc.com/news/technology-36952257 On that day, the stock dropped 1%

Re: An Important Message About Yahoo User Security

#205

"state sponsored actor". I wonder how they decided that. did the hackers plant a flag inside yahoo's data center? or is any attack originating from outside US now considered state sponsored? of course, we will never see any proof of this. also, did it take them 2 years to discover this breach? that's bad. or, do they just announce it now? that's worse.

Technically, NSA would also be a "state sponsored actor"

Re: An Important Message About Yahoo User Security

#206
post #182

Earlier quoted context omitted.

> Yahoo has zero value as a web property What!? Surely you're being flippant. Alexa currently ranks Yahoo.com as #5 worldwide and in the United States. NUMBER 5! How anyone could think that has zero value makes no sense to me.

Your statement doesn't imply value at all. If I created a web site that gave every visitor $1, it would amass an amazing number of visitors, but would be a worthless business.

Yahoo are giving away money? No, of course not. So how does your logic apply. People are visiting Yahoo because they want to use Yahoo services ... even if they're not then they're still visiting, that is valuable to online businesses where a lot of marketing goes in to just getting visitors.

> it would amass an amazing number of visitors, but would be a worthless business. //

You'd get in serious debt. But the website would still be worth something afterwards, not what you paid, but it would have a significant value. Good marketing could convert some of those repeat visitors looking for free money. Indeed, it actually sounds like not a half bad idea! Give away money via paypal/bitcoin or some such up to a limit for a few days, network effect is going to amplify that, then stop and lay out your stall .. if your stall was using bitcoin/paypal for micro payments then double+plus+good! You'd have stories in press around the world, everyone would be sharing your site ("Hey I got free money 2 days in a row at example.com").

Want to cause a riot? Release $100k in $1 notes in public in a busy, large, public space (Central Park?). Say you'll be back next week ... how many millions of people do you think you could attract, how many the 3rd week!!? How much would the press coverage and whatever brand association you could muster be worth?

Anyway, I digress.

Re: An Important Message About Yahoo User Security

#207

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

YHOO mostly tracks BABA. BABA is up over 3% today. If YHOO is flat, then it's actually down about 3%.

Re: An Important Message About Yahoo User Security

#208
post #67
post #14

Earlier quoted context omitted.

Buying a domain name is the equivalent of number portability. Recommended for everyone.

On the flip side, I did that and while generally it's been a positive experience, providing your email address over the phone has become huge pain! I definitely took for granted how easy it is to say to someone "first initial + last name at major email provider . com", instead of "really easy first part at custom domain, wait let me give you the phonetic alphabet equivalent, no just the letter b, not actually the wor…

THIS! You hit the nail on the head!

When I first went to get the domain for my main/personal email address, the .COM wasn't available...And I just didn't have an interest in the .NET or .ORG. So I went with .CC. I thought, "Hey it seems neat, slightly different (at the time) but not too weird, and its one letter shorter for people to type!" ...Or so I thought. Boy, has it been annoying with some people. Admittedly over the years it has become slightly easier, though there is the occasional exercise almost exactly as you described above, spelling it out as if to an infant.

I supposed the audience on HN is likely tech-focused, but even today (september 2016), there are so many "civilians" out there who are NOT exposed to non-.COM domains, its quite surprising. So many people that you would think have by now been exposed to some technology - hey they use advanced mobile phones, "smart tvs", etc. - and they look at you stunned if you bring up an email address with a TLD from outside the U.S. I'm living here in U.S., but if you want to really stump some people give them email addresses like the following:

* joe@smith.DE * jane@doe.FR * fred@johnson.CH

Its quite interesting!

Re: An Important Message About Yahoo User Security

#209

Earlier quoted context omitted.

Oh I'm well aware around the uniques; Yahoo is ranked #5 in Alexa worldwide. Uniques do not count as users, however and my original conjecture stands in my opinion. Now if you have active, monthly user data that would be awesome to see :)

I'm not sure what you're trying to say. The algorithms adjust for bots, spam, cross-platform duplication, etc. 900M - 1B is defined as the Monthly Active Users figure. Naturally, there are areas where we know the algorithms are not translating the inputs to real users with 100% fidelity, but we know that the discount is relatively minor, not nearly as substantial as youre suggesting. Multiple counter-parties had thei…

Maybe the parent would define a "user" as someone with an email and password in a users table?

Re: An Important Message About Yahoo User Security

#210
post #49
post #23

Anybody know what hash they use at yahoo for account passwords?

You're likely under-estimating the amount of CPU time they're willing to throw at the problem. If you have to ask, the answer is "not strong enough for your password. Change your Yahoo password. Change all other passwords that were shared. Stop sharing passwords across sites." On the other hand, my LinkedIn password was 15 base-64 characters, poorly hashed with just SHA-1. As a rough ballpark, cracking it on average…

So salted bcrypt isn't relatively safe?
Post reply on HN