Yahoo! Voice hacked; 400,000+ login credentials dumped online

Hackers belonging to a hacking collective called D33Ds Company have retrieved and dumped login details of more than 400,000+ user accounts in plain text. A post on Trustedsec stated, "The passwords contained a wide variety of email addresses including those from yahoo.com, gmail.com, aol.com, and much more." Interestingly, the post adds that the affected website is a sub-domain of yahoo.com, and that the compromised server may be Yahoo! Voice a.k.a Associated Content. "The affected website was only named as a sub-domain of yahoo.com. However, digging through and searching for the hostname, the attacker forgot to remove the hostname “dbb1.ac.bf1.yahoo.com” (credit to Mubix for the hostname find)," Trustedsec wrote. The most worrisome bit here is that the passwords that were stored were completely unencrypted, and as you're reading this, 400,000+ login credentials (comprising usernames and passwords) have been exposed.

It has been brought to light that the hackers used a union-based SQL injection attack to get away with the information stored in the database. The post on Trustedsec also put forth a glimpse of what the data leaked online looks like (can be seen in the image below).

A note at the end of the dump reads, "We hope that the parties responsible for managing the security of this sub-domain will take this as a wake-up call and not as a threat. There have been many security holes exploited in webservers belonging to Yahoo! Inc. that have caused far greater damage than our disclosure. Please do not take them lightly. The sub-domain and vulnerable parameters have not been posted to avoid further damage."

Reporting on the issue, Ars Technica's Dan Goodin wrote that the union-based SQL injection hacking technique used here affects inadequately secured web applications that do not "properly scrutinize text entered into search boxes and other user input fields". He added, "By injecting powerful database commands into them, attackers can trick back-end servers into dumping huge amounts of sensitive information."

Security breach, such as the case in point or the LinkedIn database leak, is emerging as a worrying trend. LinkedIn recently suffered a data breach where passwords of some of the social network's members were compromised. At the time of the incident, LinkedIn engineer Vicente Silveira confirmed on the website's blog that some passwords were "compromised". "We are continuing to investigate this situation," he said.

Comments

Clear Your Sinuses in 20 Seconds with Your Tongue and Your Thumb

Blocked sinuses are no fun, especially when the problem frequently requires taking a pill. Redditor gymfork points to a clever acupressure method that can solve the problem in just 20 seconds: Push your tongue against the top of your mouth and place a finger between your eyebrows and apply pressure. Hold it for about 20 seconds and your sinuses will begin to drain . When you push your tongue against the roof of your mouth, don't aim for a specific point but rather push it flat against the top. When you let go, you should start to feel a little movement in the back of your throat. It's a very simple trick that gets the job done.

What is the difference between a frigate,cruiser,destroyer, battleship ?

Usually the size and the purpose. The period of time sometimes distinguishes the name.Modern navy combat ships are generally divided into seven main categories. The categories are: Aircraft Carriers, Battleships, Cruisers, Destroyers, Frigates, Submarines, and Amphibious assault ships. There are also support and auxiliary ships, including the minesweeper, patrol boat, and tender. During the age of sail, the ship categories were divided into the ship of the line, frigate, and sloop-of-war. Frigate Frigate is a name which has been used for several distinct types of warships at different times. It has referred to a variety of ship roles and sizes. From the 18th century, it referred to a ship smaller and faster than a ship-of-the-line, used for patrolling and escort work rather than fighting fleet actions. In modern military terminology, the definition of a frigate is a warship intended to protect other warships and merchant marine ships and as anti-submarine warfare (ASW) combata...

India Become the fourth largest country in android app downloads : GOOGLE

Google's announcements on Thursday brought plenty to cheer to both Android developers and end-users in India. Google announced that Indian developers will be able to monetize their apps via paid applications, in-app products, and subscriptions. Further, Google announced that end users will be able to pay for their purchases in Indian rupees, ensuring greater transparency over the amount charged and, possibly, better deals on apps via country-specific pricing. Google shared these two announcements via a blog post. In the same blog post, Google also shared some interesting stats with respect to Android usage in India. First, the number of activations. According to Google, over the past year, Android device activations in India have jumped more than 400%. It is not clear if Google is referring to the number of activations per day, or the total devices activated till date, but either way, those are impressive numbers. Google added that in the last six months, Android u...

Knowledge Bytes ! !

Search This Blog