Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An Important Message About Yahoo User Security

yahoo.tumblr.com

Post reply on HN
Print view View original

321–330 of 356 posts

Re: An Important Message About Yahoo User Security

#321

Post by crististm »

blowski wrote: post #214
crististm wrote: post #179

Earlier quoted context omitted.

"I mean, look at this: it was a STATE-sponsored-entity that did that to us! We were overwhelmed... Did not stand a chance... I need a hug..." - At least this is how I interpreted it. They put in all the right words: "threats, Industry, government, crosshairs, strategic". Edit: "...by what it believes is a state..."??? Who is IT?

If they claim it was a state-sponsored attack and then a non-state-sponsored hacking group makes a credible claim to have been the perpetrators, Yahoo will look even worse than they do now. I doubt Yahoo is saying 'state-sponsored' just for PR.

Have anybody found out who was behind any of the recent and not so recent large scale DDOS talked about also here on HN?

Besides, "they" don't claim anything. "They" cleverly claim that "_it_ believes" it was a state-actor. Who is this _it_ they conveniently hide?

Re: An Important Message About Yahoo User Security

#322

Post by gotofritz »

djsumdog wrote: post #271
agildehaus wrote: post #234

Earlier quoted context omitted.

It's because we all keep logging in to change our passwords.

I often wonder if there really was a Linkedin breach, or if it was just to force people to remember they had a Linkedin account.

A LOT of people use Linkedin regularly, perhaps not where you live.

Re: An Important Message About Yahoo User Security

#323

Post by blowski »

crististm wrote: post #321
blowski wrote: post #214

Earlier quoted context omitted.

If they claim it was a state-sponsored attack and then a non-state-sponsored hacking group makes a credible claim to have been the perpetrators, Yahoo will look even worse than they do now. I doubt Yahoo is saying 'state-sponsored' just for PR.

Have anybody found out who was behind any of the recent and not so recent large scale DDOS talked about also here on HN? Besides, "they" don't claim anything. "They" cleverly claim that "_it_ believes" it was a state-actor. Who is this _it_ they conveniently hide?

The whole article refers to Yahoo in the third person, and "it" is also referring to Yahoo.

Occam's Razor applies here: the simplest explanation is that they are telling the truth, insofar as they have been able to establish it.

Re: An Important Message About Yahoo User Security

#324

Post by pstch »

xp84 wrote: post #319
alphapapa wrote: post #227

Earlier quoted context omitted.

EADDRESS=$([[ "$1" == "" ]] && echo "noreply@example.com" || echo "$1") could be replaced with: EADDRESS={$1:-noreply@example.com} From the man page: ${parameter:-word} Use Default Values. If parameter is unset or null, the expansion of word is substituted. Otherwise, the value of parameter is substituted. For: EADDRESS=$(echo "$EADDRESS" | sed 's;@;%40;') you could use: EADDRESS=${EADDRESS/@/%40}

Curious - exactly what man page do you find that in? I've always seen that construction but given that it just uses random punctuation it's impossible to Google it. I don't even know what those are called!!

The chapter on parameter subsitution in the LDP's Bash Scripting Guide is nice for this : http://tldp.org/LDP/abs/html/parameter-substitution.html

Re: An Important Message About Yahoo User Security

#325

Post by JaRail »

lesdeuxmagots wrote: post #142
BinaryIdiot wrote: post #134

Earlier quoted context omitted.

I don't think investors are quite that stupid. First that was 500m users in 2014 , not today. It also doesn't say active so it's likely some subset of a total. I wouldn't be surprised if Yahoo had even more than 500m accounts in 2014 and today but I would be SHOCKED if they had nearly that many active users.

Yahoo currently is clocking around 900M - 1B monthly uniques. Consider that third-party tracking still places Yahoo as one of the top trafficked websites in the world, with only Google, Baidu, and Facebook higher. Full disclosure: I work for Yahoo.

Monthly uniques? Oh come on... what's the daily?

Re: An Important Message About Yahoo User Security

#326

Post by malloryerik »

ekianjo wrote: post #318
malloryerik wrote: post #315

Earlier quoted context omitted.

Yahoo is still the number one or two site in Japan, and with a very old design and logo to boot.

Yahoo in Japan is a different company. It belongs to a different group now, so don't count it in.

Yeah, I was wondering about that when I posted (too quickly). You're right of course, though it turns out that Yahoo! still owns 35 percent of Yahoo Japan, basically the same amount as Softbank, a major Japanese ISP I believe.

http://ir.yahoo.co.jp/en/holder/status.html

Re: An Important Message About Yahoo User Security

#327

Post by breakingcups »

dlandis wrote: post #221
guelo wrote: post #177

Earlier quoted context omitted.

I think it has to do with the sophistication of the attack. If they used multiple zero-days, multiple pieces of custom coded software, and a team of operators working full time for long periods of time then it can be assumed it's a multi-million dollar effort involving a large team of engineers. In such a case the list of potential adversaries can be reduced to corporate or state actors.

It is PR. It makes them seem less incompetent if the attack was performed by a "state sponsored actor".

Exactly. I see no reason why a "state sponsored actor" would spend "millions" on hacking Yahoo, to turn around and sell the stolen data for $1200 on the black market.

Re: An Important Message About Yahoo User Security

#329

Post by Iv »

kolbe wrote: post #107
nodesocket wrote: post #89

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

Investors are conflicted: on the one hand, Yahoo had a data breach that will cost them trust, but on the other hand, investors are surprised to hear there are still 500 million Yahoo users.

Yahoo is still big in Asia. The US is just a 300 mil people market. There are giant internet companies that US consumers never heard about.

Re: An Important Message About Yahoo User Security

#330

Post by Iv »

pbarnes_1 wrote: post #109
nodesocket wrote: post #89

You'd think this would affect the stock price, but currently YHOO only trading down 8 cents (-0.18%). I honestly see this all the time. What sounds like really horrible news for a company, does not affect the price. Howerver, some random analyst or reporter who works at the Mercury Star Sun Inquirer writes a negative article or downgrade and the stock tanks. Doesn't make much sense.

YHOO is being bought by Verizon. The stock price will not move out of a fixed range.

Could Verizon be buying every share under a given price, to cheapen the deal? Would this be allowed at this point in the negotiation?
Post reply on HN