Re:Yahoo discloses hack of 1B accounts
by alyandon on Thursday December 15, 2016 @09:53AM
(#13184921)
Nope, not password re-use either. I learned that lesson the hard way over a decade ago.
Regardless, it's something that has always continued to eat at me since I can't say for certain how it happened.
The bulk hacking attacks that began around Spring 2010 hit all the big webmail providers. The source of the passwords was always, without fail, reversed hashes from breakins at other big websites:
https://googleblog.blogspot.ch/2013/02/an-update-on-our-war-...
Source: was a tech lead on the Google anti-hijacking team during this period.