201–210 of 294 posts
Wow. Coinbase's userbase is almost exclusively male. Just an interesting observation.
It's possible that is pattern isn't exclusive to coinbase. Perhaps bitcoin users in general are predominately male
I got two requests already. What kinda morons works at Coinbase to allow this?
Perhaps yesterday's "bug" reporter was unhappy at being dismissed (and he paid for Burp Suite, too!) so perhaps he decided to cause, in his words, "panic".
There's good reasons to dislike Coinbase but this isn't one of them. And of course the "full list" is bigger - the list just contains some previously-known emails and their associated, optional, Coinbase name.
Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…
Fred from Coinbase here. There is no full list, and there is no leak. We're drafting a more formal response now.
Wow. Coinbase's userbase is almost exclusively male. Just an interesting observation.
Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…
Earlier quoted context omitted.
It gives the full name associated with an email address. A more dramatic but analogous situation would be if an attacker were able to attain password info or credit card info associated with an email address. Just because email address is known does not imply that other personal information should be given away.
Does it leak the fact that you have a coinbase account? That seems private as well.
I got two requests already. What kinda morons works at Coinbase to allow this?
They're now "morons" to allow people to send payment requests? Perhaps you're not quite familiar with their business model.
Does anyone know where or if the full list can be found? I have a Coinbase account but I don't see my name on the abbreviated list. I suspect that the person who made this Pastebin just ran a huge list of known leaked emails, or dictionary based emails through the minor information leakage vulnerability discussed yesterday ( https://hackerone.com/reports/5200 ). I would be willing to bet that this brief list is actua…
There is no full list. The "exploit" doesn't give you email addresses you don't already have. This is why it was not considered a vulnerability.
Earlier quoted context omitted.
Same. It seems like it can't happen until it happens, and then you face the reality that it happened. It sucks, and there's absolutely no protection for consumers from it. There's not even any insurance policy that exchanges can purchase yet, which is pretty much the only hope at this point.
xapo.com is insured by Meridian group. There's also one in the UK that's insured Lloyd's that I'm drawing a blank on. Have you looked into either of them?