Re:Alleged leak of more than 5M Gmail accounts
by joeblau on Wednesday September 10, 2014 @02:20AM
(#8295174)
Exactly. just show me the list and let me do a command+f. I'm not trying to enter my email into their system.
[ Parent
| on HN ]
Re:Alleged leak of more than 5M Gmail accounts
by durrrrrrr on Wednesday September 10, 2014 @02:27AM
(#8295191)
Are you being serious? Next time you search google, would you rather they display 5,000,000 results on one page and you Ctrl+F the response?
Re:Alleged leak of more than 5M Gmail accounts
by bostik on Wednesday September 10, 2014 @02:49AM
(#8295250)
Wget and grep would be more likely to be used - but in answer to your question: yes, in a case like this.
Let's do some quick back-of-the-envelope math. 5M addresses, with very few longer than 25 characters. Let's say the average is around 17 characters. 17 * 5 * 10^6 = 35 * 10 ^7 = 3.5 * 10^8 bytes, or 350MB. Text generally compresses to 1/8 space with zlib, so the amount to transfer would be about 44MB, at most. Serving the list as xz compressed file could probably cut the size down to below 40MB.
In the age of 100MB youtube videos, that doesn't sound like much to me.
Re:Alleged leak of more than 5M Gmail accounts
by polarix on Wednesday September 10, 2014 @02:41AM
(#8295223)
If the local client could handle it, this would be a much more secure way of browsing.
Re:Alleged leak of more than 5M Gmail accounts
by mlatu on Saturday September 13, 2014 @09:54AM
(#8312373)
i sure hope you are beeing sarcastic, if not, consider this: it is possible to use javascript to override ctrl+f or other keystrokes. if that site would have displayed the list, and someone used ctrl+f on it, they could have simply used such a technique to add your input to the list to generate positive findings on the fly.
http://arstechnica.com/security/2012/12/how-script-kiddies-c...
Re:Alleged leak of more than 5M Gmail accounts
by mlatu on Saturday September 13, 2014 @09:55AM
(#8312377)
you should reconsider this, because it is possible to use javascript to override ctrl+f or other keystrokes. if that site would have displayed the list, and someone used ctrl+f on it, they could have simply used such a technique to add your input to the list to generate positive findings on the fly.
http://arstechnica.com/security/2012/12/how-script-kiddies-c...