Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by vpb on Thursday May 19, 2022 @07:18PM
(#31441441)
Maybe contact Have I Been Pwned?, work with them to add it to their leak database, notify site owners afterwards with a timeframe for disclosure and release your findings/blog post? Give people a way to check with HIBP, site owners a way to mitigate and claim the credit for the discovery.
[ Parent
| on HN ]
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by password4321 on Thursday May 19, 2022 @07:34PM
(#31441588)
This is probably the best option for anyone actually trying to fix the problem.
https://haveibeenpwned.com/FAQs#SubmitBreach
> If you've come across a data breach which you'd like to submit, get in touch with me. https://www.troyhunt.com/contact
Good luck on your OPSEC, should not have used your 7 year old account... might hit up dang to change the account so you don't get kidnapped.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by brightball on Thursday May 19, 2022 @07:46PM
(#31441682)
Seriously, this. You just publicly stated you have access to millions.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by _jvqm on Thursday May 19, 2022 @07:48PM
(#31441701)
That is not a very special occurrence. Iād argue you can find almost anyone with access to a million dollars online. Just go to Twitter or so.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by j-bos on Thursday May 19, 2022 @08:15PM
(#31441880)
Take a look at the hn reaction to your post, this is a special occurence. Regardless it's your decision and I imagine you have your reasons.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by _jvqm on Thursday May 19, 2022 @08:27PM
(#31441970)
Finding such a thing might be somewhat special, but (referring to your comment) having theoretical access to money is definitely not a special thing.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by j-bos on Thursday May 19, 2022 @09:54PM
(#31442472)
Right, and Have I Been Pwned is about findings.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by _jvqm on Thursday May 19, 2022 @09:57PM
(#31442495)
Yes sir, not contesting any of that, Troy Hunt may receive an anonymous email soon.
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by sebastien_b on Thursday May 19, 2022 @07:51PM
(#31441730)
He might have tried a burner account that never got approved (so no posting showing up).
Re:Ask HN: I found a pretty extreme data leak and I'm not su...
by enumjorge on Thursday May 19, 2022 @07:36PM
(#31441606)
I've never been in this situation, but this seems like a good option--reach out to someone like Troy Hunt of Have I Been Pwned or a tech journalist who does security related content(maybe someone at Arstechnica?). They probably know how to raise awareness in a way that reduces their personal liability.