51–60 of 110 posts
A quick google search shows
• http://pastebin.com/L7CYznfK
• http://pastebin.com/4YRgEwPb
that have the same message with different bitcoin addresses.
I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
Earlier quoted context omitted.
eBay didn't say what kind of encryption they had, only that they were encrypted. Personally I'm more concerned about the personal information in the leaked data that wasn't protected at all! So sure, change your password, but it won't change the fact that someone got your name, email address, physical address, phone number, and date of birth.
sp332 to be honest here, I am pretty sure if you search your real life name on the internet you will definitely find somewhere that you can buy the information you just mentioned. I am not trying to be mean here, I am just trying to let you know in case you didn't know. Plus you already have your email publicly displayed here ... and i found some weird stuff about amateur ... xxx movies when i googled you T_T
Earlier quoted context omitted.
But then, why store them ?
I believe that he's implying they would be hashed just like your password and used solely for verification with another system (like transaction authorization).
Likely the poster means person information. Name, date of birth, address, back up email, phone number should be encrypted. Even just using the users password as a key would be better then clear text.
Hacking as a spectator sport: we get to watch the blockchain for buyers![0] [0] https://blockchain.info/address/1e4aLP3jKD9wRAcSRNVb7VHbd7Kb...
What's to stop me from emailing one of those txn-ids to KbcdPfA@hushmail.com and stealing the dump?
Earlier quoted context omitted.
eBay says the data includes DoB. https://blog.ebay.com/ebay-inc-ask-ebay-users-change-passwor... [edit: better link] Maybe they only collect it for certain customers?
In that case ebay users should probably change their date of birth too ;-).
there is surprisingly large amount of Asian-sounding and Middle-East-sounding names there. Not sure how the data was chosen, but I would expect more... white-sounding names.
Hacking as a spectator sport: we get to watch the blockchain for buyers![0] [0] https://blockchain.info/address/1e4aLP3jKD9wRAcSRNVb7VHbd7Kb...
Protocol question: What's to stop me from emailing one of those txn-ids to KbcdPfA@hushmail.com and stealing the dump?
Earlier quoted context omitted.
I believe that he's implying they would be hashed just like your password and used solely for verification with another system (like transaction authorization).
I don't think hashing an address is a very good way to store it, recovery might take a while. Likely the poster means person information. Name, date of birth, address, back up email, phone number should be encrypted. Even just using the users password as a key would be better then clear text.