An Important Message About Yahoo User Security

Post by realraghavgupta » Fri, Sep 23, 2016, 4:57 AM UTC

slg wrote: post #65

realraghavgupta wrote: post #54

using 2 Factor Authentication comes handy in situations like this.

Not necessarily. 2FA only prevents access to the account, but passwords are both hard to decrypt and easy to change so I'm not too concerned about that. The real valuable data in this hack are the names, emails addresses, DOBs, telephone numbers, and security questions. Those things are very hard to change and would be very valuable data points for anyone trying to steal your identity or social engineer themselves in…

Post by kalleboo » Fri, Sep 23, 2016, 5:18 AM UTC

abysmallyideal wrote: post #286

Johnie wrote: post #205

Earlier quoted context omitted.

Technically, NSA would also be a "state sponsored actor"

So would any corporation receiving government aid, support, favorits, fundings, grants, etc...

Post by malloryerik » Fri, Sep 23, 2016, 5:35 AM UTC

kolbe wrote: post #107

nodesocket wrote: post #89

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Investors are conflicted: on the one hand, Yahoo had a data breach that will cost them trust, but on the other hand, investors are surprised to hear there are still 500 million Yahoo users.

Post by ekianjo » Fri, Sep 23, 2016, 5:43 AM UTC

nodesocket wrote: post #89

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Post by xp84 » Fri, Sep 23, 2016, 5:44 AM UTC

alphapapa wrote: post #227

guessmyname wrote: post #20

Earlier quoted context omitted.

Here is a script for the command line enthusiasts. #!/bin/bash EADDRESS=$([[ "$1" == "" ]] && echo "noreply@example.com" || echo "$1") EADDRESS=$(echo "$EADDRESS" | sed 's;@;%40;') RESPONSE=$( curl "https://heroic.com/wp-admin/admin-ajax.php" \ -H "accept-language: en-US,en;q=0.8" \ -H "accept-encoding: gzip, deflate, br" \ -H "user-agent: Mozilla/5.0 (KHTML, like Gecko) Safari/537.36" \ -H "content-type: application…

EADDRESS=$([[ "$1" == "" ]] && echo "noreply@example.com" || echo "$1") could be replaced with: EADDRESS={$1:-noreply@example.com} From the man page: ${parameter:-word} Use Default Values. If parameter is unset or null, the expansion of word is substituted. Otherwise, the value of parameter is substituted. For: EADDRESS=$(echo "$EADDRESS" | sed 's;@;%40;') you could use: EADDRESS=${EADDRESS/@/%40}