News for hackers. Stuff that matters.

A comment on Scribd hacked – emails and hashed passwords leaked. Parent comment

Re:Scribd hacked – emails and hashed passwords leaked by the_french on Thursday April 04, 2013 @12:32PM (#5493546)
They can modify it to simply say whether your account was compromised, regardless of whether you have an account (ie, if no account -> not compromised).
[ Parent | on HN ]
Re:Scribd hacked – emails and hashed passwords leaked by wuest on Thursday April 04, 2013 @12:39PM (#5493584)
...Which they ought to do. Offering the ability to enumerate user accounts is unlikely to be the immediate goal of this utility, but it's an effect nonetheless.
[ Parent | on HN ]
Re:Scribd hacked – emails and hashed passwords leaked by lelandbatey on Thursday April 04, 2013 @01:12PM (#5493781)
30 minutes later and it's fixed. Entering an invalid email also results in a "this email was not compromised" message.
[ Parent | on HN ]
Re:Scribd hacked – emails and hashed passwords leaked by yahelc on Thursday April 04, 2013 @12:45PM (#5493621)
That's what they're doing. "[email protected]" gets a message saying that that account wasn't compromised.
[ Parent | on HN ]