Live data from Hacker News

Yahoo discloses hack of 1B accounts

yahoo.tumblr.com

41–50 of 596 posts

Re: Yahoo discloses hack of 1B accounts

#41
post #9
post #3

I hope they stopped depending upon those security questions if that is part of the leak. On a side note, this seems like a great time to be an abuser. One can collect so much information about users - they may actually have more data than any govt in the world.

I hope everyone stops relying on security questions!

The answers to my security questions tend to look like "e74bd7eb-10c6-4b90-bde0-dde2ed64946e"

Re: Yahoo discloses hack of 1B accounts

#42
post #24

I'm speechless. More and more are migrating to cloud these days, I expect more and more epidemic leakage will come. I host everything myself except for email, which is always a headache but contains more private info than all others I manage combined. Maybe it is time to run a small email server again but it is easily said than done, gosh please give me something like a working PGP or whatever for safe emails(PGP is…

Me and a number of my freinds in clubs at my university use it whenever we need to send secrets to eachother, but everything else is done in clear text.

Re: Yahoo discloses hack of 1B accounts

#44

Earlier quoted context omitted.

What is your mother's maiden name? T3m92uGKhWMRV7Um0WVF50LKQNowpoe0FWwWryL2r9jkuAHyLTCY8QoY79iMiSjo6CHCZGWl

Which only works until you call in asking for a password reset and when they ask you the question you just say "I just hit the keyboard a bunch".

No, I pull up the answer out of 1Password and read it off to them.

Re: Yahoo discloses hack of 1B accounts

#45
By now it's probably easier if Yahoo just published the (short) list of services that weren't owned through-and-through right under their noses, and notify users unaffected by any breach (0 rows returned).

Re: Yahoo discloses hack of 1B accounts

#47

Earlier quoted context omitted.

What is your mother's maiden name? T3m92uGKhWMRV7Um0WVF50LKQNowpoe0FWwWryL2r9jkuAHyLTCY8QoY79iMiSjo6CHCZGWl

Which only works until you call in asking for a password reset and when they ask you the question you just say "I just hit the keyboard a bunch".

[deleted]

Re: Yahoo discloses hack of 1B accounts

#49
post #46
post #30

Guys... let's just delete our Yahoo accounts. That company can't go bankrupt fast enough. It will sell our data for quarters.

Is it possible to extract all emails+contacts from yahoo without paying ? furthermore my paypal account is linked to yahoo.

Yes, you need to scrape their webpages. 10 years ago when I pulled everything from my Yahoo acct, there were several choices of open source scripts which could do it.

Re: Yahoo discloses hack of 1B accounts

#50
post #26

Notice that this is yet ANOTHER hack, not the one HN was talking about a few month ago. also notice they were still using MD5 passwords AND without salts ... None of these hacks have been disclosed directly to their users, I never got an email saying I may have been hacked and I should reset my password, irresponsible.

This "new" one happened before the previously disclosed hack.
Post reply on HN