[deleted]
Coinbase user emails and full names leaked
21–30 of 294 posts
Re: Coinbase user emails and full names leaked
#22[deleted]
Re: Coinbase user emails and full names leaked
#23> Coinbase provides your full transaction history to the FBI, FinCEN and IRS every day. They are under a gag order. That is interesting accusation. Even if this is true, we will unlikely have evidence. Is there a serious risk to Coinbase users granted Gov is having full access?
If they had evidence of that, why wouldn't they have pasted it as well? I'm assuming it's baseless speculation. Btw, has anyone actually confirmed any of these emails / names are real? I have a coinbase account and am not mentioned in the leak.
Wouldn't any evidence supporting the existence of the gag order be a violation of the gag order?
Re: Coinbase user emails and full names leaked
#24Hi, I'm also an account created solely for the purpose of a single submission / comment!
The difference is that you haven't contributed anything.
Re: Coinbase user emails and full names leaked
#25It's really hard for me to trust anything I read online on April Fools Day.
Re: Coinbase user emails and full names leaked
#26Earlier quoted context omitted.
Apparent Coinbase response there: "This stance is not unusual on the web: you'll find that user enumeration is possible on Facebook, Google, and nearly every other major internet site" Um, no. If that is what Coinbase believes, I just lost respect for their claims of security.
Would you care explaining why it is that you believe email enumeration to be "insecure"? The data obtained is an email address and a name (only if the user filled in the "name" field). This may as well be treated as public information.
Do you publish that you have a Coinbase account? That's the issue. Now these people are valuable targets for spear phishing and other attacks on their e-mail accounts because it's known that they have hot access to at least some amount of Bitcoin. Without that information, an attacker is shooting blind.
So, this sort of leak or enumeration basically reduces the (though tenuous) degree of security afforded by one's privacy.
Re: Coinbase user emails and full names leaked
#27> Coinbase provides your full transaction history to the FBI, FinCEN and IRS every day. They are under a gag order. That is interesting accusation. Even if this is true, we will unlikely have evidence. Is there a serious risk to Coinbase users granted Gov is having full access?
If they had evidence of that, why wouldn't they have pasted it as well? I'm assuming it's baseless speculation. Btw, has anyone actually confirmed any of these emails / names are real? I have a coinbase account and am not mentioned in the leak.
I can confirm at least one name and address on it is real.
Re: Coinbase user emails and full names leaked
#28This doesn't seem like that big of an issue. Yes coinbase should protect against this, but it doesn't really cause a security threat of any kind (assuming you have a secure password). This is a list of people who have bitcoins, but if you have a secure password you should be fine, further you can change your email.
Re: Coinbase user emails and full names leaked
#29Earlier quoted context omitted.
Would you care explaining why it is that you believe email enumeration to be "insecure"? The data obtained is an email address and a name (only if the user filled in the "name" field). This may as well be treated as public information.
Do you publish that you have a Coinbase account? That's the issue. Now these people are valuable targets for spear phishing and other attacks on their e-mail accounts because it's known that they have hot access to at least some amount of Bitcoin. Without that information, an attacker is shooting blind. So, this sort of leak or enumeration basically reduces the (though tenuous) degree of security afforded by one's pr…
shrug
Some people certainly do: https://twitter.com/search?q=just%20bought%20coinbase&src=ty...
I agree it's not ideal, but if your security relied on a guessable email address staying private, you're already not in a good place.
Re: Coinbase user emails and full names leaked
#30Earlier quoted context omitted.
If they had evidence of that, why wouldn't they have pasted it as well? I'm assuming it's baseless speculation. Btw, has anyone actually confirmed any of these emails / names are real? I have a coinbase account and am not mentioned in the leak.
Wouldn't any evidence supporting the existence of the gag order be a violation of the gag order?
Because it's not a secret. That is (a heavily dramatized version of) the standard regulations that apply to every licensed money transmitting service.