Live data from Hacker News

Snapchat Phone Number Database Leaked

snapchatdb.info

51–60 of 237 posts

Re: Snapchat Phone Number Database Leaked

#52

What does snapchatdb hope to accomplish by allowing people to download the db. Just showing and proving that you've hacked the database should be enough to get the company to respond. They're probably not hurting snapchat as much as the potential damage to the people who's phone numbers and usernames are being dowloaded.

Wasn't there a story posted right here on HN like a week ago where some people notified snapchat of the vuln. and provided evidence, but Snapchat told them to basically f * off? I'm not savvy enough to have the link at hand but I vividly remember that happening.

Previous Discussions:

https://news.ycombinator.com/item?id=6962329 (6 days ago)

https://news.ycombinator.com/item?id=6970036 (4 days ago)

Re: Snapchat Phone Number Database Leaked

#53

I have list of all US phone numbers: 000-000-0000 000-000-0001 ...

Yes, this is strange on all fronts. As far as I know names and land numbers are still published in phone books, and a phone number isn't generally a very interesting bit of information to have. And to the extent this information is sensitive, why be so eager to spread it (beyond being a teenager and getting a thrill)?

Re: Snapchat Phone Number Database Leaked

#54
post #4

It's taking too much time to download each file even they're 40 MB. I wish they put it on as torrent in the first place. Regarding the leak, yeah, that actually happens when you focus on the product but security and reliability of your system. Snapchat, Whatsapp and many others are hacked numerous times and yet it still happens.

I do not wish they would torrent this. People, think about it. Personal, private phone numbers. Why would you want this information? Seriously the comments here make me sad for humanity right now.

Torrent or not, I want to see if any of my less tech-savvy friends are on the list so I can warn them even though I don't use Snapchat myself. It's much easier to convince them there's a real problem if I can say "Look, I can get your phone number and username from the Internet just like that" rather than explaining theoretical reasons why they're vulnerable.

Re: Snapchat Phone Number Database Leaked

#57

I have list of all US phone numbers: 000-000-0000 000-000-0001 ...

Yes, this is strange on all fronts. As far as I know names and land numbers are still published in phone books, and a phone number isn't generally a very interesting bit of information to have. And to the extent this information is sensitive, why be so eager to spread it (beyond being a teenager and getting a thrill)?

Do you agree that many people are more public online behind the anonymity of a username, compared with their name as listed in public phone books?

Re: Snapchat Phone Number Database Leaked

#58
Possibly they shouldn't have pissed on the people who notified them of the vulnerability, and on the journalists who broke the story?

(aside from not being vulnerable to this in the first place, but that actually is a lot to ask. I still can't believe anyone relied on the Snapchat model of security more so than any other app, although from an ease of use, non-security perspective, sure, it's reasonable.)

Re: Snapchat Phone Number Database Leaked

#59
post #47
post #34

Earlier quoted context omitted.

Um, I just want to say that I have _NO IDEA_ why my BTC address is on that list and I've never seen this git URL before in my life. That BTC address is my deposit address on BTC-e.com. This address has only ever received 2.25 BTC[1] and this was purchased fair & square from coinbase.com[2] with my hard-earned USD. I really do not know what in the world is going on or who put my BTC-e.com address on this alleged crypt…

Well, word to the wise, don't use BTC-e as a wallet.

I would have found it quite amusing/scary to suddenly see some huge balance on my account. BTC-e.com sends emails for any account activity and I haven't seen anything I didn't cause. Also, BTC-e.com is just too convenient not to use for now. It's the quickest way for me to get litecoin until coinbase.com supports it.
Post reply on HN