Live data from Hacker News

Coinbase user emails and full names leaked

pastebin.com

101–110 of 294 posts

Re: Coinbase user emails and full names leaked

#102
post #90

Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…

For what it's worth, I have a coinbase account linked to a gmail address in the form firstname.lastname, where both are common names. I'd expect it to be in a dictionary based list, and it's not on the pastebin.

[deleted]

Re: Coinbase user emails and full names leaked

#103
post #39

Earlier quoted context omitted.

There's lots wrong with anonymity. But those wrongs are the price we pay for the benefits of anonymity. Thinking there's "nothing wrong with anonymity" is the kind of intellectual fallacy that makes it so hard to take 'net libertarians seriously.

Eh... I would say anonymity is problematic - not that there's something "wrong" with it though.

The consequences of anonymity can be problematic. For example, theft. Or assault.

Of course, I expected to be pounded down for my comment, because frankly, the simpleminded libertarian wannabes are idiots. They got offended and had no idea that I'm actually a huge proponent of anonymity, despite my strongly implying it in the comment. I want anonymity. But I don't pretend that it's magical pixie dust that makes everything better and has no negative consequences.

Re: Coinbase user emails and full names leaked

#104

Earlier quoted context omitted.

how do you keep track of all the emails? and did you always do this or did you start at one point having to go back through a lot of old accounts to change emails and passwords?

If you use gmail, you can use youremail+anything@gmail.com, and it will all get forwarded to youremail@gmail.com. This is incredibly handy for noticing who is sending you spam. I'll also use it for sites that I know are going to send me spam, and then immediately create a filter than deletes emails sent to joe+annoyingsite@gmail.com (note: that's not my real email)

That does nothing to increase the security of your accounts, since effectively the email address is the same.

Re: Coinbase user emails and full names leaked

#105

Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…

There is no full list. The "exploit" doesn't give you email addresses you don't already have. This is why it was not considered a vulnerability.

Re: Coinbase user emails and full names leaked

#106

Why the fuck would someone keep cash in a central repository if the whole purpose of bitcoin is to be de-centralized? It's like, hey, I have a car so I can get around town any time I want, so let me park it with a bunch of other cars in a dark open lot 2 miles from my house. Sure, I have to take a short bus ride to get to it, and it could be stolen or broken into at any time, but that's the price I pay for convenienc…

Perhaps some of these individuals are using coinbase as a way to purchase bitcoins before they move them to their private wallets.

Re: Coinbase user emails and full names leaked

#107

Why the fuck would someone keep cash in a central repository if the whole purpose of bitcoin is to be de-centralized? It's like, hey, I have a car so I can get around town any time I want, so let me park it with a bunch of other cars in a dark open lot 2 miles from my house. Sure, I have to take a short bus ride to get to it, and it could be stolen or broken into at any time, but that's the price I pay for convenienc…

In my case, because Coinbase provides a simple, trusted way to sell Bitcoin and deposit the money into my bank account.

I'm not buying Bitcoin because it's decentralized. I'm buying it because there is a market bubble, and I can profit from currency speculation.

Re: Coinbase user emails and full names leaked

#108

Earlier quoted context omitted.

how do you keep track of all the emails? and did you always do this or did you start at one point having to go back through a lot of old accounts to change emails and passwords?

If you use gmail, you can use youremail+anything@gmail.com, and it will all get forwarded to youremail@gmail.com. This is incredibly handy for noticing who is sending you spam. I'll also use it for sites that I know are going to send me spam, and then immediately create a filter than deletes emails sent to joe+annoyingsite@gmail.com (note: that's not my real email)

Does this actually prevent true spammers, or only emails you consider spam, but the sender thinks is worthwhile?

Otherwise, as a 'true' spammer, why wouldn't you just always strip off everything after the plus when adding the email to your distribution list?

Re: Coinbase user emails and full names leaked

#110

Earlier quoted context omitted.

how do you keep track of all the emails? and did you always do this or did you start at one point having to go back through a lot of old accounts to change emails and passwords?

If you use gmail, you can use youremail+anything@gmail.com, and it will all get forwarded to youremail@gmail.com. This is incredibly handy for noticing who is sending you spam. I'll also use it for sites that I know are going to send me spam, and then immediately create a filter than deletes emails sent to joe+annoyingsite@gmail.com (note: that's not my real email)

That won't help here, your real Gmail address is exposed which lets everyone know that you have BTC on web wallets.
Post reply on HN