Readit News logoReadit News
trumped commented on 800M Email Addresses Leaked Online by Email Verification Service   securitydiscovery.com/800... · Posted by u/tlrobinson
albertgoeswoof · 6 years ago
I strongly believe that we should be keeping our email addresses as secure as our passwords. It’s a really important attack vector as it’s often the starting point for any targeted attack, and although it’s not usually considered as a factor, it is the 2nd factor required for most logins (email and password). Triggering important security processes (eg reset password, social engineering attacks) are trivial once you know someone’s email address.

It’s clear from this hack that the owners of the hacked site didn’t see emails as something worth securing (stored in plain text on a wide open mongo server)

If you want to keep your email address private (you should), generate a new, random email address whenever you give yours out (the same way you use a password manager). If you have your own domain you can use a catch all/wildcard address, eg. *@mydomain.com, if you use gmail you can use their plus support, e.g. John+uniqueidentifier@gmail.com, if you use neither or want more security I’ve recently launched https://idbloc.co which aims to help deal with this.

trumped · 6 years ago
this is like saying that you should keep your public street address private... you are thinking about it backward. What needs to be done is don't use your email address as a login or worst, as a password recovery option.
trumped commented on Spotify adds 1M unique listeners in India in less than a week   reuters.com/article/us-sp... · Posted by u/doener
SmellyGeekBoy · 6 years ago
Slipknot, Dream Theater and Pantera are watered down? What?
trumped · 6 years ago
those are not mainstream, what... next thing you'll tell me liquid tension experiment is mainstream? people on this sub live in a different world apparently
trumped commented on What is it like working at a company after releasing a negatively-received game?   reddit.com/r/Games/commen... · Posted by u/danso
philipov · 6 years ago
Woa, have people started stealing top comments and crossposting them to farm karma?
trumped · 6 years ago
nothng new... about as old as the web
trumped commented on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing   zdnet.com/article/firefox... · Posted by u/commoner
SmellyGeekBoy · 6 years ago
It's more a case of the web being used in ways in which it wasn't really originally intended. Of course developers can implement things poorly and create problems (and often do) but demand for things like responsive sites is user-driven in my experience.

If you don't understand how the web works and actively dislike the community I don't understand why you keep commenting here.

trumped · 6 years ago
it's all good my little monkey.... also tell me why most websites use files from 20 different domains if you understand the web so well....
trumped commented on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing   zdnet.com/article/firefox... · Posted by u/commoner
function_seven · 6 years ago
What CSS file did the browser fetch? The one for screens less than 500px wide? Or the one for screens that are 504px wide?

There are a million ways to exfiltrate UI parameters through JS and CSS. It’s hard to both prevent that and still allow JS and responsive pages.

trumped · 6 years ago
right... developers suck, overall ( I could not reply to the comment below because nyc would not let me)
trumped commented on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing   zdnet.com/article/firefox... · Posted by u/commoner
function_seven · 6 years ago
What CSS file did the browser fetch? The one for screens less than 500px wide? Or the one for screens that are 504px wide?

There are a million ways to exfiltrate UI parameters through JS and CSS. It’s hard to both prevent that and still allow JS and responsive pages.

trumped · 6 years ago
just grab them all... not a huge deal, they are so small.
trumped commented on U.S. users are leaving Facebook by the millions, Edison Research says   marketplace.org/2019/03/0... · Posted by u/rmason
trumped · 6 years ago
lol facebook is probably just deleting a few troll accounts....
trumped commented on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing   zdnet.com/article/firefox... · Posted by u/commoner
burtonator · 6 years ago
Apps need it to determine where to place elements.

If it wasn't you would still be able to reverse engineer it by sticking elements outside the viewport and seeing if they're hidden or not.

Turns out anonymity is super freaking hard. :-/

trumped · 6 years ago
apps? do we consider websites apps now?

but either way if you have the JS, CSS and HTML, you should know where to put elements.

Are nyc (news yc com) people part of the problem?

trumped commented on Firefox to add Tor Browser anti-fingerprinting technique called letterboxing   zdnet.com/article/firefox... · Posted by u/commoner
cronix · 6 years ago
> The general idea is that "letterboxing" will mask the window's real dimensions by keeping the window width and height at multiples of 200px and 100px during the resize operation --generating the same window dimensions for all users-- and then adding a "gray space" at the top, bottom, left, or right of the current page.

> The advertising code, which listens to window resize events, then reads the generic dimensions, sends the data to its server, and only after does Firefox remove the "gray spaces" using a smooth animation a few milliseconds later.

Would using a setTimeout() on the window resize event bypass this? Send the data 20-50ms after resize is completed giving enough time for the letterboxing stuff to go away revealing the actual dimensions, or something? They say it only blocks the dimensions during the resize event and FF removes the letterboxing "a few ms later"

trumped · 6 years ago
Havent they thought about not broadcasting the window size... wtf. We are doomed apparently.

Dead Comment

u/trumped

KarmaCake day1April 16, 2018View Original