Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Snapchat Phone Number Database Leaked

snapchatdb.info

Post reply on HN
Print view View original

71–80 of 237 posts

Re: Snapchat Phone Number Database Leaked

#71

Post by MiWDesktopHack »

smtddr wrote: post #59
w-ll wrote: post #47

Earlier quoted context omitted.

Well, word to the wise, don't use BTC-e as a wallet.

I would have found it quite amusing/scary to suddenly see some huge balance on my account. BTC-e.com sends emails for any account activity and I haven't seen anything I didn't cause. Also, BTC-e.com is just too convenient not to use for now. It's the quickest way for me to get litecoin until coinbase.com supports it.

Did the snapchatdb.info guys change the donation address? Its now reporting as 1M7rREovDkdEh4mZrYNgcj1FECRknFLuRz

They have already got $1USD for this. https://blockchain.info/address/1M7rREovDkdEh4mZrYNgcj1FECRk...

When i first read your post smtddr i got worried we had a collision! Ive found the quality of blockchain auditing in 2013 highly inaccurate. I recently bring attention to the case recently on reddit where someone 'chased' the SMP thief through a tumbler and found... the 96k wallet allegedly owned by btc-e. Its a shame if a non published address of yours has been tainted in someones inaccurate blockchain analysis.

Re: Snapchat Phone Number Database Leaked

#72

Post by mlyang »

pedalpete wrote: post #6

What does snapchatdb hope to accomplish by allowing people to download the db. Just showing and proving that you've hacked the database should be enough to get the company to respond. They're probably not hurting snapchat as much as the potential damage to the people who's phone numbers and usernames are being dowloaded.

according to the snapchatdb page, they've blurred the last two numbers of the phone numbers so as to not cause complete damage.

Re: Snapchat Phone Number Database Leaked

#73

Post by stefan_kendall »

This is only useful in wide-net fishing attacks, most of which I'm guessing no one here would fall for.

Anyone interested in you particularly will quickly get your phone number, email address, facebook profile, social security number, or whatever they want if they're determined enough.

Even then, I'm not sure what information this database really provides that could be used to gain some fraudulent or exploitive benefit.

Re: Snapchat Phone Number Database Leaked

#74

Post by antimatter15 »

The top comment on Reddit r/netsec's corresponding coverage has mirrors on Mega.co.nz for the files [1]

I couldn't find my own data in the set, and actually it seems like lots of entire area codes are missing.

Assuming `cat schat.csv | uniq | cut -c1-4 | wc -l` is the proper command, there are only 76 of 322 [2] US area codes represented.

It appears there are two Canadian area codes represented in the database: 867 and 204. There are also 248 US area codes which are not represented in the database. Assuming a relatively uniform distribution of phone numbers in the US (which is not at all a safe assumption), the average US snapchat user has better odds of not being in the list than being in it. Sampling from the set of my snapchat friends who are not in my area code, 3 of 13 can be found in the database.

If your phone number is in any of these states, you're not in the database: Alaska Delaware Hawaii Kansas Maryland Mississippi Missouri Montana Nebraska Nevada New Hampshire New Mexico North Carolina North Dakota Oklahoma Oregon Rhode Island Utah Vermont West Virginia Wyoming

[1] http://www.reddit.com/r/netsec/comments/1u4xss/snapchat_phon...

[2] I'm matching a regex against this list http://en.wikipedia.org/wiki/List_of_North_American_Numberin...

Re: Snapchat Phone Number Database Leaked

#76

Post by verroq »

belluchan wrote: post #8

Looks like they are using WhoIsGuard to protect the domain whois information. The terms of WhoIsGuard[1] include not violating the privacy of others: > defame, abuse, harass, threaten or otherwise violate the legal rights (such as rights of privacy and publicity) of others; I've sent WhoIsGuard an email. Hopefully they'll revoke service. Shame on the people that published this private information. They aren't hurting…

If you think they registered using their real name and address then you are the delusional one.

Re: Snapchat Phone Number Database Leaked

#77

Post by smtddr »

MiWDesktopHack wrote: post #71
smtddr wrote: post #59

Earlier quoted context omitted.

I would have found it quite amusing/scary to suddenly see some huge balance on my account. BTC-e.com sends emails for any account activity and I haven't seen anything I didn't cause. Also, BTC-e.com is just too convenient not to use for now. It's the quickest way for me to get litecoin until coinbase.com supports it.

Did the snapchatdb.info guys change the donation address? Its now reporting as 1M7rREovDkdEh4mZrYNgcj1FECRknFLuRz They have already got $1USD for this. https://blockchain.info/address/1M7rREovDkdEh4mZrYNgcj1FECRk... When i first read your post smtddr i got worried we had a collision! Ive found the quality of blockchain auditing in 2013 highly inaccurate. I recently bring attention to the case recently on reddit where…

w-ll was talking about the original BTC address in my profile being on the known list for cryptolocker. The same address I linked to in my reply to her/him. When you say "we", who are you?

Also, that whole reddit thread about chasing the SMP stolen coins I thought was too hard to actually pull off. For example, I use coinbase to buy BTC, to send to BTC-e.com, to buy Litecoins and ultimately store them in the offline address that's in my HN profile. Can anyone show me the blockchain.info URLs that would prove my actions? If the SMP people changed coin-types, that's how it'd end up on BTC-e.com's wallet. In fact, maybe that same flawed logic is how my BTC-e.com address ended up in that list - capturing addresses that BTC-e.com uses for its customers or internal operations.

Re: Snapchat Phone Number Database Leaked

#78

Post by Istof »

pikachu_is_cool wrote: post #40

Is there a torrent for this? I want to see if my phone number has been compromised to I can take measures to change it.

CSV: https://mega.co.nz/#!dcUhWabJ!dgiGrQCbRm6RqWCssewbmWzfV48B_B...

SQL: https://mega.co.nz/#!QJklSRJA!WrVeARPvcYgyKI3KENiPu0A6hlRCLf...

Re: Snapchat Phone Number Database Leaked

#79

Post by TylerE »

belluchan wrote: post #20
aabalkan wrote: post #4

It's taking too much time to download each file even they're 40 MB. I wish they put it on as torrent in the first place. Regarding the leak, yeah, that actually happens when you focus on the product but security and reliability of your system. Snapchat, Whatsapp and many others are hacked numerous times and yet it still happens.

I do not wish they would torrent this. People, think about it. Personal, private phone numbers. Why would you want this information? Seriously the comments here make me sad for humanity right now.

Phone numbers are hardly private information.

Re: Snapchat Phone Number Database Leaked

#80

Post by rdl »

sneak wrote: post #31
belluchan wrote: post #8

Looks like they are using WhoIsGuard to protect the domain whois information. The terms of WhoIsGuard[1] include not violating the privacy of others: > defame, abuse, harass, threaten or otherwise violate the legal rights (such as rights of privacy and publicity) of others; I've sent WhoIsGuard an email. Hopefully they'll revoke service. Shame on the people that published this private information. They aren't hurting…

> Shame on the people that published this private information. That would be Snapchat. Stop trying to censor stuff that's already out there. http://en.wikipedia.org/wiki/Streisand_effect

Actually in this case the absolute best thing would be for Snapchat, Inc. to go full court press against snapchatdb.info, as what is actually important here is to communicate both the "snapchat security is a lie" message, and "companies which flagrantly suck and then piss on those who report vulnerabilities responsibly will suffer" message, rather than the actual snapchat phone/username db. Streisand will help that more than "go to this site which is really slow and download a huge file which you can't easily use to find your own number or that of your friends" (without a minimum of "how to use a computer" skill).
Post reply on HN