Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Snapchat Phone Number Database Leaked

snapchatdb.info

Post reply on HN
Print view View original

171–180 of 237 posts

Re: Snapchat Phone Number Database Leaked

#171

Post by kamimeow »

scaramanga wrote: post #105

CSV: magnet:?xt=urn:btih:bab9548c3770188c70d27ded9b22348f5b979713&dn=Snapch at+database+CSV&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80 &tr=udp%3A%2F%2Ftracker.publicbt.com%3A80&tr=udp%3A%2F%2Ftrack er.istole.it%3A6969&tr=udp%3A%2F%2Ftracker.ccc.de%3A80&tr=udp% 3A%2F%2Fopen.demonii.com%3A1337 SQL: magnet:? xt=urn:btih:f7b1cec6280edb8169d63550ba2dfb224df7810d&dn=Snapch at+database+SQL&tr=udp%3A%2F%2Ftracker.openbit…

That's crazy how some personnal infos, once leaked, become a public/underground data leaving no real way to repair. (I m thinking about leaks of other infos with an expiracy, or tier revoking, like oauth tokens)

Re: Snapchat Phone Number Database Leaked

#172

Post by wrongc0ntinent »

X4 wrote: post #151
jkelsey wrote: post #36

Earlier quoted context omitted.

Still too early to make those types of statements. I think it mostly depends on how much the media plays this up.

we are kind of the media.. and reddit is too.. I also believe that they made a fatal error by not selling everything for $3bn then jumping aboard. To not have anything to do with the "soon to come security issues". I mean they could have mentioned it and downplay it as they did just recently. I don't think that the new owner would take security more serious than them. For us it was really really good that he rejected…

>I don't think that the new owner would take security more serious than them.

I don't know about that. Their dismissal was (at least framed as) "well that's a lot of data, so it's not going to happen!"

Actual excerpt from their blog, on the 27th: "Theoretically, if someone were able to upload a huge set of phone numbers, like every number in an area code, or every possible number in the U.S., they could create a database of the results and match usernames to phone numbers that way."

This is kind of a joke.

Re: Snapchat Phone Number Database Leaked

#173

Post by lucb1e »

jodrellblank wrote: post #160
lucb1e wrote: post #156

Earlier quoted context omitted.

Why do you even share your phone number with Google?

http://www.google.com/landing/2step/

2FA is pretty useless if you have a good password and simply mind the https lock and domain when logging in. Also I wouldn't share anything with Google that is sensitive enough that it needs 2FA at all.

Re: Snapchat Phone Number Database Leaked

#174

Post by ballpoint »

myko wrote: post #163
jkelsey wrote: post #36

Earlier quoted context omitted.

Still too early to make those types of statements. I think it mostly depends on how much the media plays this up.

Not to mention I don't think most of snapchats target audience even cares about this issue. My 20 year old sister certainly doesn't.

I'd be surprised if most of them are even aware of it, let alone care about it.

Re: Snapchat Phone Number Database Leaked

#175

Post by TylerE »

coralreef wrote: post #131
TylerE wrote: post #79

Earlier quoted context omitted.

Phone numbers are hardly private information.

Hmm, I somewhat disagree. Private information is anything you don't want public. By protocol, it isn't strictly private. But a phone number is private/unknown until its known, which is how most of us prefer it. For example, in implicit social code it is impolite to give away a friend's phone number without asking them first.

Seriously? Ever heard of whitepages.com?

Re: Snapchat Phone Number Database Leaked

#176

Post by ja27 »

untog wrote: post #21

Not at all surprised. Anyone that used the app would be suspicious of the backend behind it. Should have taken that $3bn while you had the chance.

Unless it's changed recently, the phone number is user-supplied and I'm not sure if it's verified at all. They do claim that the phone number "will be stored as unique mathematical representations (or 'hashes')..." rather than plaintext, but I imagine if you know it's a non-salted phone number that's been hashed, it's pretty easy to brute force. But were they lying about hashing the phone numbers? I guess it doesn't matter if they hashed the phone numbers if they're going to expose an unlimited query API that can be brute-forced like this.

Re: Snapchat Phone Number Database Leaked

#177

Post by eli »

chmars wrote: post #116
antimatter15 wrote: post #74

The top comment on Reddit r/netsec's corresponding coverage has mirrors on Mega.co.nz for the files [1] I couldn't find my own data in the set, and actually it seems like lots of entire area codes are missing. Assuming `cat schat.csv | uniq | cut -c1-4 | wc -l` is the proper command, there are only 76 of 322 [2] US area codes represented. It appears there are two Canadian area codes represented in the database: 867 a…

It had never occurred to me that cell phone operators would use area codes. In my small home country, there is basically one 'area code' per cell phone operator. First lesson learnt in 2014! :)

In many countries the caller pays for the cellular airtime. You have to know how much your call is going to cost before you dial it, so a new area code is needed. In the US, the cell phone user pays for the airtime even for calls they receive, so a new area code was never needed.

Re: Snapchat Phone Number Database Leaked

#179

Post by eli »

mfreeman451 wrote: post #168
mgulaid wrote: post #118

Earlier quoted context omitted.

Here is a video of guy hacking SnapChat and finding out Mark Zuckberg's logging info like phone#, email. The video was posted on Dec 26th. How come they did not fix this.. https://www.youtube.com/watch?v=JEWugKX98P0

1.805.250.1351

What purpose does posting that serve? I think we've already pretty clearly established the flaw is real. What does intruding on the personal life of an unrelated person have to do with it?

Do we really need rules saying "don't post other people's non-public personal details" like Reddit? Someone needs to tell you that?

Re: Snapchat Phone Number Database Leaked

#180

Post by samstave »

mfreeman451 wrote: post #168
mgulaid wrote: post #118

Earlier quoted context omitted.

Here is a video of guy hacking SnapChat and finding out Mark Zuckberg's logging info like phone#, email. The video was posted on Dec 26th. How come they did not fix this.. https://www.youtube.com/watch?v=JEWugKX98P0

1.805.250.1351

zucks cell#? probably want to delete that.
Post reply on HN