Stories
Slash Boxes
Comments

SoylentNews is people

posted by takyon on Wednesday August 19 2015, @01:30AM   Printer-friendly
from the find-your-own-torrent dept.

Multiple reports suggest that Impact Team has leaked around 9.6 to 10 gigabytes of data from the "cheating/affair website" Ashley Madison onto Tor sites (now available via BitTorrent). According to Ars Technica:

A 10-gigabyte file purportedly containing e-mails, member profiles, credit-card transactions and other sensitive Ashley Madison information became available as a BitTorrent download in the past few hours. Ars downloaded the massive file and it appeared to contain a trove of details taken from a clandestine dating site, but so far there is nothing definitively linking it to Ashley Madison. User data included e-mail addresses, profile descriptions, addresses provided by users, weight, and height. A separate file containing credit card transaction data didn't include full payment card numbers or billing addresses.

Rob Graham, CEO of Errata Security, said the dump also included user passwords that were cryptographically protected using the bcrypt hashing algorithm. That's among the most secure ways to store passwords, because bcrypt is extremely slow, a trait that requires crackers to devote vast amounts of time and computing resources. Still, it's highly likely a large percentage of the hashes will be cracked, given rampant use of weak passwords.

Ashley Madison officials have stopped short of confirming the published information was extracted from the breach.

"We have now learned that the individual or individuals responsible for this attack claim to have released more of the stolen data," they wrote in an e-mail to Ars. "We are actively monitoring and investigating this situation to determine the validity of any information posted online and will continue to devote significant resources to this effort. Furthermore, we will continue to put forth substantial efforts into removing any information unlawfully released to the public, as well as continuing to operate our business."

Previously: Adult 'Extracurricular Activity' Website AshleyMadison.com Hacked


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Wednesday August 19 2015, @11:01AM

    by Anonymous Coward on Wednesday August 19 2015, @11:01AM (#224919)

    You're right. Neither party offers anythig to the other in the wedding vows. Likewise, neither party accepts that non-existent offer (don't be fooled by the words "I do", "do" is just legalese jargon that means nothing). Likewise, neither party intents the marriage to be legally binding, that would be absurd. And finally, neither party has anything of value invested in the deal, so there's no consideration either.

    And finally, the most damning proof that marriage is not a contract is that the phrase "marriage contract" has never ever been uttered, written, or otherwise communicated.