Coinbase user emails and full names leaked
pastebin.com
Coinbase user emails and full names leaked
1–10 of 294 posts
Re: Coinbase user emails and full names leaked
#2The link has no mention of the "bug was dismissed" as stated in the HN title. Support for this? Or is it the same bug as https://news.ycombinator.com/item?id=7504353 ?
Also, what is the evidence for the assertion that transaction logs are delivered daily? Given recent revelations, it's probably a reasonable assumption, but there's still no actual evidence given.
Re: Coinbase user emails and full names leaked
#3Hi, I'm also an account created solely for the purpose of a single submission / comment!
Re: Coinbase user emails and full names leaked
#4This feels... weird. There was a problem with Coinbase months ago that was patched where some of this information could be found if someone was using Coinbase's merchant tools.
A list of emails and names feels a lot like trying to cause a panic to get people to dump Coinbase.
Re: Coinbase user emails and full names leaked
#5The link has no mention of the "bug was dismissed" as stated in the HN title. Support for this? Or is it the same bug as https://news.ycombinator.com/item?id=7504353 ? Also, what is the evidence for the assertion that transaction logs are delivered daily? Given recent revelations, it's probably a reasonable assumption, but there's still no actual evidence given.
Here is the bug closed as "Won't fix" (so yes, it is the same exploit/bug):
Re: Coinbase user emails and full names leaked
#6> Coinbase provides your full transaction history to the FBI, FinCEN and IRS every day. They are under a gag order.
That is interesting accusation. Even if this is true, we will unlikely have evidence. Is there a serious risk to Coinbase users granted Gov is having full access?
Re: Coinbase user emails and full names leaked
#7Hi, I'm also an account created solely for the purpose of a single submission / comment!
Hi, nothing wrong with anonymity.
Re: Coinbase user emails and full names leaked
#8I assume someone took a huge list of emails and ran them through the Coinbase API as described in https://hackerone.com/reports/5200 and retrieved their full names, and is now scaremongering. I do not think they are enumerating users from the coinbase database, but who knows.
edit: The recent adobe email list comes to mind.
Re: Coinbase user emails and full names leaked
#9I'm pissed. My email address is among those leaked. I got two transaction requests, the first for 732342.34425 BTC and the second for 999999.99999999 BTC. The second had registered a username of "⚠ URGENT: Сoinbase hacked. We" so that the email subject line read "⚠ URGENT: Сoinbase hacked. We sent you a payment request."
I got my coin out of Inputs.io just a few days before they got hacked, and I've got a low balance in Coinbase. I'm going to make that a zero balance, because I've completely lost faith in any company's ability to manage Bitcoin.
Re: Coinbase user emails and full names leaked
#10I assume someone took a huge list of emails and ran them through the Coinbase API as described in https://hackerone.com/reports/5200 and retrieved their full names, and is now scaremongering. I do not think they are enumerating users from the coinbase database, but who knows. edit: The recent adobe email list comes to mind.
You're right. As a Coinbase customer, neither my name or Coinbase-only email address was in this list.
What you describe is exactly the exploit that was disclosed and exactly what the person exploiting it seems to have done based on the content of the list. Of course, Coinbase argues that this is a feature and not a bug.