Jeez, how do they still have a positive net worth? Like seriously, obviously their users & user data is worthless, they don't care about it getting stolen, nor do they seem serious about fixing their dilapidated, insecure systems. This is just a case of poor management, if Google, Facebook, Twitter and others can figure out how to secure their sites, Yahoo can.
> If Google, Facebook, Twitter and others can figure out how to secure their sites, Yahoo can. The other article linked in this thread[1] attributes this attack to a "state-sponsored actor", which is interesting considering that Google was hacked by such an actor [2], but I'm not sure they ever acknowledged it. I doubt anyone can say for sure that Facebook and/or Twitter haven't been hacked in such a way. If anything…
Google is definitely more secure and more proactive at security than Yahoo. You can look through their security whitepaper: they take a systematic approach and they meet and exceed the state of the art.[2] In contrast, Yahoo was hashing passwords with MD5. Here's Ptacek saying "there is no redeeming quality to justify using MD5", in 2007.[3] Yahoo doesn't really have any excuse.
[1] https://www.schneier.com/blog/archives/2016/09/the_hacking_o...
[2] https://drive.google.com/file/d/0B5Y-fwYJF2hLOTVmMzQ1MjAtMDF...
[3] https://web.archive.org/web/http://www.matasano.com/log/958/...
(I'm not affiliated with any of these companies.)