[Wildfire]

Here's a whopper. Biggest data breach right now that has been seen in a while.

Yahoo News: https://www.yahoo.com/news/yahoo-says-ha...43037.html
CNN: http://money.cnn.com/2016/09/22/technolo...index.html

500. million.

The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers.

[Bish0pQ]

Security of those big sites are still sooo weak. I mean there ain't a system that can't be exploited but still, we are talking about 500 million accounts here. Not to mention how many accounts get hacked from the same data. Netlfix, game and financial accounts will be hacked in the coming days.

[Mr.Kurd]

I always think that Gmail is better than all.

[jolov1c]

Maybe hotmail is the best .. I'm using mail.com mail and I don't give a fck

[dezired]

wow, thats a shit load, wonder how long until it's being sold on those check if your hacked sites

[Invisibility]

I had the 2014 Yahoo database but the server its on is offline

Edit: got it the db back lol

[mothered]

Now this Is music to my ears.

I for one, well and truly know that the amount of vulnerabilities that exist In major corporations, Is absolutely appalling (from a security standpoint). From a hacker's perspective, It's simply fantastic.
Yahoo does have 2FA, and this Is a perfect example as to why It should be enabled.

[Wildfire]

Now this Is music to my ears.

I for one, well and truly know that the amount of vulnerabilities that exist In major corporations, Is absolutely appalling (from a security standpoint). From a hacker's perspective, It's simply fantastic.
Yahoo does have 2FA, and this Is a perfect example as to why It should be enabled.

Back in 2014 there was gaping SQLi in Yahoo! Voices. 500,000 users exposed. But this is insane, 100x more exposure (albeit bcrypt).

[mothered]

Back in 2014 there was gaping SQLi in Yahoo!

One of the most common vulnerabilities (SQLi), and Yahoo fell victim.

I'm appalled as to the number of SQL-based web applications that are not sanitized, hence open to all sorts of attack vectors. In-Band (Error-based & Union-based) are everywhere.