Live data from Hacker News

Coinbase user emails and full names leaked

pastebin.com

91–100 of 294 posts

Re: Coinbase user emails and full names leaked

#92
post #36

Earlier quoted context omitted.

It also discloses whether someone is a customer or not. Possibly en masse. Problems: 1) Aids phishing attacks against Coinbase and customers 2) Oftentimes harmless tidbits of information can be combined to form non-harmless information. In this case, disclosing email, name, and the fact of being a Coinbase customer, or not, seems minor on its own. However, combine it with some other dataset (let's say emails/password…

2 things: First, the vast majority of attackers are more "smash and grab" than "stealthy jewel theft." They really don't care about leaving tracks, they are going for volume. Want to phish people for coinbase creds? Email a mass of people. Have a list of usernames/password from a data breach? Attackers have automated tools that will automatically try them against thousands of websites. It's more expensive and time co…

The second point is a bit of a straw-man. I never meant to imply that this Coinbase disclosure and the NSA metadata are proportional in terms of severity; just that they are structurally similar. The point is that small bits of information can become surprisingly big with the right analysis and effort.

Re: Coinbase user emails and full names leaked

#93
post #40

Earlier quoted context omitted.

> Even an end of world bug means that they can only ever lose a small portion of all stored user funds. Were you born yesterday? The steal-all-your-money rate of bitcoin businesses is running right around 100%, and you're going to lecture people that "they can only ever lose a small portion of all stored user funds"? Really?

Coinbase isn't some random website made in a basement. It's a well funded, YC backed, known-founder company that complies with relevant banking law. There's absolutely nothing to suggest that they hold a partial reserve or have any ill intention whatsoever.

YC-backed startup means a culture of 'move fast and break things' - works for facebook, but definately not something I would want to store my bitcoin on, since 'break things' means 'losing all my money with no recourse'

Re: Coinbase user emails and full names leaked

#94

I am curious why their contact form isn't posting over SSL http://support.coinbase.com/customer/portal/emails/new While I want to contact support for help, I am hesitant to fully disclose my issue in their contact form.

Here you go: https://coinbase.desk.com/customer/portal/emails/new support.coinbase.com is just an alias for their Desk account.

I may be missing something but your link is 301'ing to http://support.coinbase.com/customer/portal/emails/new so I really don't how I can submit a contact form over SSL.

It is kind of a moot point because I have committed to moving my bitcoin out of coinbase.

Re: Coinbase user emails and full names leaked

#97

Earlier quoted context omitted.

Here you go: https://coinbase.desk.com/customer/portal/emails/new support.coinbase.com is just an alias for their Desk account.

I may be missing something but your link is 301'ing to http://support.coinbase.com/customer/portal/emails/new so I really don't how I can submit a contact form over SSL. It is kind of a moot point because I have committed to moving my bitcoin out of coinbase.

Strange. No 301 here. http://i.imgur.com/2eWQ2kP.png

Re: Coinbase user emails and full names leaked

#98
post #78

Someone should market bitcoin to women. From a cursory review of that list of names, women don't seem to be signing up. Missing half the market...

Some members of the Bitcoin community have... some work to do in making women feel welcome. An illustrative blog post by a woman that went to a meetup:

http://www.ariannasimpson.com/this-is-what-its-like-to-be-a-...

“Well,” he says looking at me knowingly, “Women don’t usually think in terms of efficiency and effectiveness”.

Re: Coinbase user emails and full names leaked

#99
post #44

And this is why in addition to per site passwords, I also use per site email addresses. I like to be able to track who spams me and in case of leaks I like the ability to disable an email address...

how do you keep track of all the emails? and did you always do this or did you start at one point having to go back through a lot of old accounts to change emails and passwords?

If you use gmail, you can use youremail+anything@gmail.com, and it will all get forwarded to youremail@gmail.com. This is incredibly handy for noticing who is sending you spam.

I'll also use it for sites that I know are going to send me spam, and then immediately create a filter than deletes emails sent to joe+annoyingsite@gmail.com (note: that's not my real email)

Re: Coinbase user emails and full names leaked

#100
Why the fuck would someone keep cash in a central repository if the whole purpose of bitcoin is to be de-centralized? It's like, hey, I have a car so I can get around town any time I want, so let me park it with a bunch of other cars in a dark open lot 2 miles from my house. Sure, I have to take a short bus ride to get to it, and it could be stolen or broken into at any time, but that's the price I pay for convenience, versus just keeping it in my garage where it's much more inconvenient for anyone to steal or damage it. (?????)

A website is not a bank. There are no armed guards or vaults and there is no federal insurance for your bitcoin. You're basically all handing your money to some guy who keeps all the coin on the second floor of a corporate office with a single old dude standing guard at the elevator. It's totes hard to get past that guy, because like, he has a badge and a hat and everything.

Post reply on HN