Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Sunday December 18 2016, @05:33AM   Printer-friendly
from the probably-too-late dept.

Yahoo has said data from more than one billion accounts may have been hacked.

But should you be worried - and what can you do to protect yourself in the future?

[...] Security expert and writer Brian Krebs said in a blog, "For years I have been urging friends and family to migrate off of Yahoo email, mainly because the company appeared to fall far behind its peers in blocking spam and other email-based attacks."

Yahoo has reassured its users: "We continuously enhance our safeguards and systems that detect and prevent unauthorised access to user account."

Some may not think of themselves as Yahoo users but the firm provides some BT and Sky customers' email accounts [in the UK].


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Informative) by daver!west!fmc on Sunday December 18 2016, @06:48AM

    by daver!west!fmc (1391) on Sunday December 18 2016, @06:48AM (#442622)

    ...just about anyone getting Internet and e-mail service from any of the companies making up AT&T is getting it from Yahoo. sbcglobal.net, att.net, bellsouth.net, swbell.net, some pacbell.net customers. I've wondered who Yahoo's other hosted mail customers are.

    Back in 2012 there was something going round that got lots of 'em. The basic exploit was a web site that looked like a news page about someone finding success working from home, but did some cross-site scripting with some other Yahoo property (i.e. not Yahoo's webmail) to capture the Yahoo session cookie and post it to some other server where the session cookie was collected for use. So a link to this site would get spammed to Yahoo mailboxes, some of 'em would click on it, and then their mailboxes and contacts were available to the spammer who would use the Yahoo account to send links to similar pages to the clicker's correspondents.

    The spammers have mined the relationships, I now (years later) get spam e-mails nominally from a couple Yahoo-using friends but from other e-mail addresses.

    Starting Score:    1  point
    Moderation   +2  
       Interesting=1, Informative=1, Total=2
    Extra 'Informative' Modifier   0  

    Total Score:   3  
  • (Score: 2, Interesting) by anubi on Sunday December 18 2016, @09:38AM

    by anubi (2828) on Sunday December 18 2016, @09:38AM (#442640) Journal

    I had SBC dialup many years ago. I ended up leaving them for Localnet when SBC and Yahoo got in bed together and from all appearances of their business emails to me, were insisting I must use a Yahoo interface to access the web through SBC.

    From what I understood, I could not use the Netscape I was using at the time. They wanted me to use their proprietary portal software. I was afraid they were fixing to net-nanny me and not let me visit sites like +Fravia was running. I was already a big-time fan of +Fravia and +ORC at the time, as I was having fits making stuff work together.

    Microsoft and other software publishers had already taught me the perils of running proprietary software, and how businesses - when they want to show their rude side - will have a machine do the deed of telling their customer "NO", usually by way of having no option available or simply failing to respond - the technology-based equivalent of hanging up the phone on the customer - or simply walking away in the middle of a conversation. People were supposed to accept it if a computer did it.

    At the time, I was determined to build software infrastructures that worked - no matter what.
     

    --
    "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 0) by Anonymous Coward on Sunday December 18 2016, @06:30PM

      by Anonymous Coward on Sunday December 18 2016, @06:30PM (#442739)

      What's this "+" you are doing?

      • (Score: 1, Informative) by Anonymous Coward on Sunday December 18 2016, @06:52PM

        by Anonymous Coward on Sunday December 18 2016, @06:52PM (#442744)

        +Fravia and +ORC are two of the big people in the reverse engineering scene. The '+' signifies that they are members of the +HCU: one of the best reverse engineers on the planet.

        • (Score: 2) by butthurt on Monday December 19 2016, @08:31AM

          by butthurt (6141) on Monday December 19 2016, @08:31AM (#443016) Journal

          Someone wrote in Wikipedia:

          Fravia was a professor at the High Cracking University (+HCU), founded by Old Red Cracker (+ORC), a legendary figure in reverse engineering, to conduct research into Reverse Code Engineering.

          -- https://en.wikipedia.org/wiki/Fravia [wikipedia.org]