The "Oh hey look who got hacked today" thread!

[Anoat]

Well Gawker can go suck a dick, so yeah.

[Cantih]

Ashley Madison hacked, group claiming to release all information if demands are not met, yada yada yada. I love it. Cheaters are the scum of the earth.

Update, the info was released.
One of the Duggars is the first prominent find. For the politics section, here's another http://thehill.com/business-a-lobbyi...data-dump-hack

Louisiana GOP Executive Director Jason Doré said Thursday that his name was among those released as part of the Ashley Madison data dump earlier this week because he used the site for “opposition research.”

And there's more
http://www.wired.com/2015/08/ashley-...ger-batch-data

On the heels of releasing 10 gigabytes of data on Tuesday, they released a new, bigger batch of data that’s about 20 gigabytes worth of compressed files.
Judging by the file names in the latest dump, they appear to include email spools belonging to Ashley Madison’s top executive.

[6souls]

The latest dump includes the source code & encryption keys.

[Meresgi]

[Psion]

oh man, this so much lmao

[Grey Jorildyn]

Seriously. Salliemae, wells fargo, and fedloan. Hacks I would pay for.

[zoobernut]

Add Bank of America to the list and Navient (who took over all of SallieMae loans)

[Meresgi]

Seriously, would pay 1/4th my student loan out to hackers to hack away the other 3/4th haha.

Actually had 2 professors that worked for Sallie Mae at one point in their IT department. I asked them to write a worm.

[Kyreth]

Hackers generally go for "soft targets".

The kind of people who could get through Sallie Mae's pile of redundant data-records and security measures are the kind of people like China/Russia who would prefer you stay fucked-up and unhappily debt-slaved anyway.

[Anoat]

http://finance.yahoo.com/news/were-o...175956661.html

There were three zip codes in all of the United States that did not have an associated Ashley Madison account.
Nikolai, Alaska--Population: 94
Perryville, Alaska--Population: 113
Polvadera, New Mexcio--Population: 269

[Ragnus]

http://finance.yahoo.com/news/ashley...233158251.html

Most of the female accounts on the website were created by the company itself. The whole thing was pretty much setup to fleece dudes looking to cheat, while having a couple actual women pop on to get claims from.

Apparently 350 female accounts all had the same, odd last name.

[Pirian]

http://finance.yahoo.com/news/ashley...233158251.html

Most of the female accounts on the website were created by the company itself. The whole thing was pretty much setup to fleece dudes looking to cheat, while having a couple actual women pop on to get claims from.

Apparently 350 female accounts all had the same, odd last name.

Science confirming what gamers have known all along: there are no women on the internet.

[6souls]

Looks like EA's Origin had a breach. They did a mass password reset earlier today due to suspicious activity.

[Cantih]

http://www.reuters.com/article/2015/...0RN1V820150923

Hackers who stole security clearance data on millions of Defense Department and other U.S. government employees got away with about 5.6 million fingerprint records

And this is why biometric security is stupid. You can change a password, you can change a widget, you can't change your biometrics (not without some really drastic shit anyway). So when biometrics is subverted, you are fucked for life.

[zoobernut]

http://www.reuters.com/article/2015/...0RN1V820150923


And this is why biometric security is stupid. You can change a password, you can change a widget, you can't change your biometrics (not without some really drastic shit anyway). So when biometrics is subverted, you are fucked for life.

Legit question if you have a photo of someones fingerprint can you send it into the biometric unit to fake it actually reading a fingerprint? I guess I always thought there had to be something physically for the biometric device to read.

[Byrthnoth]

Legit question if you have a photo of someones fingerprint can you send it into the biometric unit to fake it actually reading a fingerprint? I guess I always thought there had to be something physically for the biometric device to read.

3D printing. Fingerprints are literally a reduced contour map of your finger, so you can 3D print a fingerprint like you might print a stamp.

[archibaldcrane]

http://www.reuters.com/article/2015/...0RN1V820150923


And this is why biometric security is stupid. You can change a password, you can change a widget, you can't change your biometrics (not without some really drastic shit anyway). So when biometrics is subverted, you are fucked for life.

That's really interesting. However, optimal security is a combo of 3 things right? Something you have (like a smartphone to get a code on), something you know (like your password) and something you are (like biometrics). Never thought about how you can change the first two but not the third though.

[Cantih]

There isn't really a magic number (other than, not 1). The best security is the most security you can implement while still maintaining usability.
No component is perfect, all have failures. It's just that biometric's fail state goes some really nasty places.

[Obiron]

Legit question if you have a photo of someones fingerprint can you send it into the biometric unit to fake it actually reading a fingerprint? I guess I always thought there had to be something physically for the biometric device to read.

They did this a few years back on Mythbusters. Turns out some fingerprint scanners are pretty simple to fool.

[archibaldcrane]

http://gizmodo.com/reminder-you-dont...ium=socialflow

Weirdly enough, while alphanumeric passcodes are protected in this way, phones with fingerprint locks may not be. Last year, in Virginia, a court ruled that suspects didn’t have to reveal their passwords—but they did have to unlock their TouchID-protected phones with their fingerprints, since biometric data isn’t protected by the Fifth Amendment.