Yahoo Hacked

Post by na85 » Mon, Oct 06, 2014, 4:41 PM UTC

daveloyall wrote: post #46

mrt0mat0 wrote: post #26

Am I the only one that thinks this kind of thing would be cool to see? I've seen logs of attacks, but I've never watched a botnet irc live. that would be crazy for me. Not really moving the conversation forward, but is this so commonplace that I'm the odd man for marveling?

:) You're not the only one. First, read this. Note the date. http://www.crime-research.org/library/grcdos.pdf I read that shortly after it was originally published. And I thought to myself: COOL! I was seventeen. I had a spare Windows 95c (or was it 98se?) box laying around, and some experience with inctrl5, a linux box which could operate as a router, and some basic knowledge of tcpdump(1). Importantly, I could also…

Post by bostonpete » Mon, Oct 06, 2014, 4:42 PM UTC

onewaystreet wrote: post #40

panopticon wrote: post #34

Earlier quoted context omitted.

I think the "that have yielded any luck" part of that quote is pretty important.

The point I'm making is that he didn't do the obvious thing and search for their actual security report address which they have, respond to, and pay people money who report bugs to. He found the hacked servers by doing a search but couldn't do this?

Post by voxic11 » Mon, Oct 06, 2014, 4:45 PM UTC

daveloyall wrote: post #36

seren wrote: post #3

This is a courageous disclosure since the OP risks to be in some trouble for his "ethical probing".

In the winzip email, he rambles about his mother. Which makes his signature line pretty interesting. :) > A fool learns only from himself. A wise man will learn from the fool. So he's got this 'honest fool' thing going for him. If he can marry that with meticulous record keeping, maybe he'll be OK. Of course, IANAL. But ffs, I'm sick of this world where the defense "Wait, you misunderstand--I'm the GOOD guy!" isn't g…

Post by onewaystreet » Mon, Oct 06, 2014, 4:47 PM UTC

bostonpete wrote: post #63

onewaystreet wrote: post #40

Earlier quoted context omitted.

The point I'm making is that he didn't do the obvious thing and search for their actual security report address which they have, respond to, and pay people money who report bugs to. He found the hacked servers by doing a search but couldn't do this?

I don't see how you're reaching this conclusion. He said, there are no publicly available contact methods that have "yielded any luck". He didn't say there are no publicly available contact methods or that he didn't e-mail yahoo's "security" e-mail address.

Post by icebraining » Mon, Oct 06, 2014, 4:53 PM UTC

pessimizer wrote: post #56

kjjw wrote: post #41

Earlier quoted context omitted.

Are these people concerned with security or are they running a protection racket? The way you put it is starting to sound like the latter.

I'd say: "Are these people concerned with receiving income for difficult, highly specialized, valuable work, or are they running a charity?" I guess it's a matter of perspective.