Yahoo Voices Hacked, Usernames and Passwords Posted Online. • Hacker News Board

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#11

Post by mistermann » Thu, Jul 12, 2012, 2:17 PM UTC

Anyone know exactly what it means to be a yahoo voice user? I use yahoo chat, and I think I've used voice chat in the past, but I don't see my username in the dump drostie posted.

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#12

Post by ovi256 » Thu, Jul 12, 2012, 2:48 PM UTC

techinsidr wrote: post #5

This story is incorrect to boot. It was Yahoo! VOICES with an (S) not Yahoo Voice.

Well, I find it pretty ridiculous that Yahoo has so many products that Voice and Voices are different products.

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#13

Post by davedd » Thu, Jul 12, 2012, 2:52 PM UTC

We did an analysis of the dump:

http://blog.sucuri.net/2012/07/analysis-of-yahoo-voice-passw...

Interesting is the lack of "yahoo" as part of the passwords... I would expect a much higher % from a yahoo leak.

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#14

Post by dhughes » Thu, Jul 12, 2012, 2:54 PM UTC

ovi256 wrote: post #12

techinsidr wrote: post #5

This story is incorrect to boot. It was Yahoo! VOICES with an (S) not Yahoo Voice.

Well, I find it pretty ridiculous that Yahoo has so many products that Voice and Voices are different products.

I've never heard of either...either.

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#15

Post by tathagatadg » Thu, Jul 12, 2012, 2:59 PM UTC

s_henry_paulson wrote: post #6

geekin wrote: post #3

WTF - Yahoo news posting about Yahoo's username password hacked...this is seriously ridiculous.

No, ridiculous would be them trying to cover it up. This is perfectly normal.

I guess its surprising that it does not cite a official press release from the company, (which is what you would normally expect), but to another news site. Also if one of your products faces such a crisis situation, would you want your users to read the company's reaction in such dispassionate, unapologetic language?

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#16

Post by zecho » Thu, Jul 12, 2012, 3:03 PM UTC

drostie wrote: post #9

At the risk of essentially slashdotting myself or making my web host very angry at me, I have stripped out the passwords so that the only component remaining is the email addresses, in case you want to check whether you were part of the breach. (I was not! hooray!) I am hosting this at: http://drostie.org/yahoo_leak.txt . If I receive too much traffic I may simply pastebin it.

Thank you. One of my email addresses is there. Thankfully it's just an account I use for fantasy baseball. Super obnoxious, though.

Re: Yahoo Voices Hacked, Usernames and Passwords Posted Online.

#17

Post by bigodines » Thu, Jul 12, 2012, 3:35 PM UTC

I think these accounts were prior to Yahoo! Acquisition of associatedcontent. There is NO WAY for a "native" yahoo property to store plain text passwords. Of course this is a yahoo fault to buy a company with such a weak security...

If this was a leak in yahoo, the number of users with a yahoo e-mail would be much, much higher.