Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Yahoo Hacked

webcache.googleusercontent.com

Post reply on HN
Print view View original

91–100 of 258 posts

Re: Yahoo Hacked

#91

Post by sdegutis »

Someone1234 wrote: post #88
philjohn wrote: post #17

Earlier quoted context omitted.

TIL - people still use WinZip

It is surprising how many 90s tools remain popular today: WinZip, WinRar, WinAmp, CCleaner, Icq, Real Player, etc. People just get into using something and simply never stop. Then there's the comfort barrier to switching (e.g. I know how to use WinZip but 7Zip is new and unfamiliar). CCleaner is still popular with low level tech support types, which is quite ironic as it damages the Windows Registry on later versions…

To this day I can't figure out how ICQ ever became popular, but yes I can vouch that there are still people who use it and probably always will.

Re: Yahoo Hacked

#92

Post by rbobby »

w-ll wrote: post #74
chatmasta wrote: post #57

Earlier quoted context omitted.

The OP will go to prison? Seems a bit hyperbolic to me, without any sort of citation or basis for belief.

It probably would have been best to just notify Winzip. Telling the FBI you broke into a server to see if you could, and that you found that someone else had also broken in before you is just plain stupid.

Bank robber calling the cops to report the safe has already been cleaned out...

Re: Yahoo Hacked

#93

Post by olegbl »

onewaystreet wrote: post #72
bdevani wrote: post #62

Earlier quoted context omitted.

Dude your screen name is really telling. He reached out, and didn't have any luck. Companies truly need to learn how to deal with these breaches in a way that re-invites the public trust

You seem to be missing my point. I've repeated it in a bunch of other comments but I'll do it again here: You don't get points for "reaching out" when you don't spend a second to search for the right address to reach out to. Yahoo has a page dedicated to reporting bugs. If he had used that page he would have gotten a response. Yahoo has paid dozens of people for doing this https://hackerone.com/yahoo?show_all=true .

I'm not quite sure why you seem so sure he didn't also send an email to that address (or use that form)? I didn't read the article thoroughly, did he enumerate somewhere which ways of contacting Y! he tried?

Re: Yahoo Hacked

#94

Post by dzhiurgis »

sdegutis wrote: post #91
Someone1234 wrote: post #88

Earlier quoted context omitted.

It is surprising how many 90s tools remain popular today: WinZip, WinRar, WinAmp, CCleaner, Icq, Real Player, etc. People just get into using something and simply never stop. Then there's the comfort barrier to switching (e.g. I know how to use WinZip but 7Zip is new and unfamiliar). CCleaner is still popular with low level tech support types, which is quite ironic as it damages the Windows Registry on later versions…

To this day I can't figure out how ICQ ever became popular, but yes I can vouch that there are still people who use it and probably always will.

For some reason it was considered anonymous and safe from surveillance.

Re: Yahoo Hacked

#95

Post by sdfghhasdf »

pit wrote: post #49
Nyr wrote: post #8

Mirror of the response, since the site is loading really slow: http://cl.ly/image/2E3D2H2B2d2t

Classic. "Thanks for pointing out this insanely serious issue, which is unfortunately not eligible for our bug bounty program." Maybe they'll send him a free hat.

lol, dudes going to prison. He ain't getting no hat...

Re: Yahoo Hacked

#96

Post by agildehaus »

Someone1234 wrote: post #88
philjohn wrote: post #17

Earlier quoted context omitted.

TIL - people still use WinZip

It is surprising how many 90s tools remain popular today: WinZip, WinRar, WinAmp, CCleaner, Icq, Real Player, etc. People just get into using something and simply never stop. Then there's the comfort barrier to switching (e.g. I know how to use WinZip but 7Zip is new and unfamiliar). CCleaner is still popular with low level tech support types, which is quite ironic as it damages the Windows Registry on later versions…

Can you point me to a description of CCleaner's problems? It's still my go-to tool for cleaning computers, and I've never had a problem or heard of anything major (besides the normal bugs that get fixed). It also isn't a 90s tool, being first released in 2003.

What's your idea of a better alternative?

Re: Yahoo Hacked

#97

Post by maximumoverload »

mukyu wrote: post #21

This writeup doesn't really get to the point so, the tl;dr He was looking for places to exploit shellshock by googling for cgi scripts. Most of the ones he did find had already been hit by someone using a perl script that made them join an irc channel that was being used as CnC. He also joined it and monitored it. A bunch of different yahoo boxes were in the channel and he saw some of them get rooted.

Thanks.

This guy writes a lot of text but it takes him forever to get to the point.

Re: Yahoo Hacked

#98

Post by imaginenore »

Nyr wrote: post #8

Mirror of the response, since the site is loading really slow: http://cl.ly/image/2E3D2H2B2d2t

"Yeah, this major bug you told us about, not eligible."

Fk Yahoo, they deserve what's happening to them.

Re: Yahoo Hacked

#99

Post by Mikushi »

rbobby wrote: post #92
w-ll wrote: post #74

Earlier quoted context omitted.

It probably would have been best to just notify Winzip. Telling the FBI you broke into a server to see if you could, and that you found that someone else had also broken in before you is just plain stupid.

Bank robber calling the cops to report the safe has already been cleaned out...

That would imply OP had malicious intentions, which he apparently did not.

Re: Yahoo Hacked

#100

Post by vkjv »

agildehaus wrote: post #96
Someone1234 wrote: post #88

Earlier quoted context omitted.

It is surprising how many 90s tools remain popular today: WinZip, WinRar, WinAmp, CCleaner, Icq, Real Player, etc. People just get into using something and simply never stop. Then there's the comfort barrier to switching (e.g. I know how to use WinZip but 7Zip is new and unfamiliar). CCleaner is still popular with low level tech support types, which is quite ironic as it damages the Windows Registry on later versions…

Can you point me to a description of CCleaner's problems? It's still my go-to tool for cleaning computers, and I've never had a problem or heard of anything major (besides the normal bugs that get fixed). It also isn't a 90s tool, being first released in 2003. What's your idea of a better alternative?

Before anything else, I should mention that I haven't worked help desk in over 5 years.

Back when I worked help desk, the most common reason for a completely FUBAR and need a re-install was that the user ran CCleaner on it.

Post reply on HN