News for hackers. Stuff that matters.

bnmathm

Re:Lastpass Security Incident on Thursday December 01, 2022 @12:55PM (#33819889)
I have to believe that if hackers hit the treasure trove of Lastpass customer passwords, Instagram is not going to be their first target. We'd be seeing financial fraud first and foremost, likely sparingly at first, to not alert everyone to the fact that all of our passwords are compromised.
Re:Lastpass Security Incident on Wednesday November 30, 2022 @05:26PM (#33808793)
> We have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers’ information. Our customers’ passwords remain safely encrypted due to LastPass’s Zero Knowledge architecture.

Sure sounds like they found passwords or keys in the development environment breach back in August, and nobody bothered to change those after knowing they were hacked.

Re:Number of unemployed persons per job opening on Thursday November 03, 2022 @09:18PM (#33460456)
prime-age employment available by state anywhere?
Re:Is Authorize.net Down? on Wednesday July 28, 2021 @03:20PM (#27988432)
Authorize is down, status page is down,

Endicia (USPS Postage) Label Server API went down about the same time.

Perhaps something larger going on.

I'm pretty sure that's actually GBR - Great Britain.
Re:How the iPhone Changed Kayak’s Business on Thursday December 10, 2009 @12:32PM (#988152)
Oh, so you think that Kayak will actually be charging me for the ticket -- that would be easy. I got the impression that Kayak would be storing my credit card details and automatically fill out the appropriate airline's website forms in the background... which would require storing all of my credit card details with reversible encryption.

Also, according to my processor there is no interchange fee difference for using CVV or not. There is a financial incentive for address verification, but not CVV. Maybe this varies by processor.

Re:How the iPhone Changed Kayak’s Business on Thursday December 10, 2009 @11:20AM (#988044)
I'm not sure how they expect to save users' credit card details in a way that can be transferred to the airlines. Can't store the CVV code at all, and everything else is supposed to be encrypted.