I don't know why anyone would still be using Yahoo as their email provider at this point.
Yahoo discloses hack of 1B accounts
421–430 of 596 posts
Re: Yahoo discloses hack of 1B accounts
#422Re: Yahoo discloses hack of 1B accounts
#423there's a couple of things that these major providers getting pwned teaches you: 1) their security isn't good just because of their scale/size (that begins to seem more and more like a false-assumption nowadays) 2) migrating your email to a new provider is quite difficult (consider that the average person will have just 1 - or 2 - email accounts and they link EVERYTHING to it) 3) the price of ads/convenience is no lo…
If Yahoo goes down, I won't have email; or at best I'll maybe keep a Zoho. I hate Google's mail interface, I hate the way they make 'conversations' out of discrete emails, and I especially hate their lack of folders. I use GMail begrudgingly at work, and only when necessary, and every time, I look at it and go, "what dipshit ever thought this was a functional way to deal with email?" As a dedicated Windows user, I'm…
You can disable 'conversation' mode. I did that 2 days after they make it the default.
Re: Yahoo discloses hack of 1B accounts
#424Anybody getting "NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED"?
Chrome says "The server presented a certificate that was not publicly disclosed using the Certificate Transparency policy. This is a requirement for some certificates, to ensure that they are trustworthy and protect against attackers."
Probably my Chrome version is too old I guess? (probably not, it's 53 which is only a little behind the latest).
Re: Yahoo discloses hack of 1B accounts
#425Earlier quoted context omitted.
Yep, people who've run marginally popular sites have dealt with this before. Give someone a text box and watch them try to stuff 4GB of content in it. There has to be a cutoff somewhere, but as you note, it should be well outside of the realm of reasonable password lengths (hundreds of characters).
Hash the password locally (you are serving JavaScript over SSL right?) and only send the SHA256.
Never trust the client.
Re: Yahoo discloses hack of 1B accounts
#426"We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data"
How the forensic experts could have analysed? based on the log data? my another question is, just assume if yahoo is trying to dump the experts, can it be possible? or else, still the experts be experts to make sense out of it?
Re: Yahoo discloses hack of 1B accounts
#427"We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data" How the forensic experts could have analysed? based on the log data? my another question is, just assume if yahoo is trying to dump the experts, can it be possible? or else, still the experts be experts to make sense out of it?
Is this english?
Re: Yahoo discloses hack of 1B accounts
#428Wait, according to this,
""" Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. We have not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016. """
this incident occurred in 2013 and 2016, or they needed three year to figure this hack out. How is this possible?
Re: Yahoo discloses hack of 1B accounts
#429Sales and marketing automation companies just got a huge boost in their capability to do SMTP validation.
Time to go check HANSA on the onion.
Re: Yahoo discloses hack of 1B accounts
#430DO NOT delete your Yahoo account! In their disclaimer when you delete it, they state:
> "[...] we may allow other users to sign up for and use your current Yahoo! ID and profile names after your account has been deleted"
Bummer if you forget that it was the password reset email for your Facebook account, huh? Instead of deleting your account, purge it of all data: https://honeypot.net/purge-your-yahoo-account/