Thanks Yahoo. Glad you're on top of things
-
A long time ago, I created a Yahoo account. I don't even remember why and haven't logged in since who-knows-when. This morning I received an email, sent to a Gmail account that I set up long ago specifically for those times when I don't want to give someone my real email address.
(emphasis added by me)
We are writing to inform you about a data security issue that may involve your Yahoo account information. We have taken steps to secure your account and are working closely with law enforcement.
What Happened?
Law enforcement provided Yahoo in November 2016 with data files that a third party claimed was Yahoo user data. We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in
August 2013
stole data associated with a broader set of user accounts, including yours. We have not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016.
-
Hey, it's all good! It was only practically their entire user base:
Why yes, they're criminally incompetent imbeciles. Why do you ask?
-
@lolwhat said in Thanks Yahoo. Glad you're on top of things:
Hey, it's all good! It was only practically their entire user base:
Why yes, they're criminally incompetent imbeciles. Why do you ask?
Man, I hope that all of the news got the information from a heavily accented dude who actually said "one Brazilian accounts".
-
@Sumireko That reminds me of a joke
Donald Rumsfeld is giving the president [George W. Bush] his daily briefing. He concludes by saying: 'Yesterday, 3 Brazilian soldiers were killed'. 'OH NO!' the President exclaims. 'That's terrible!'
His staff are stunned at this display of emotion, they watch nervously as the President sits, head in hands.
Finally, the President looks up and asks, 'How many is a brazillion?'
-
Thank goodness my !yahoo¡ password is something stupid and unique and I only use it for flickr
-
Looks like I only lost one Yahoo account. I had the same name at all their domains reserved, and one of them was asking me security questions that don't make sense (What's your youngest child's middle name? I have no children...).
I did find some kind of rate-limiting on enabling two-factor authentication, and I only found it because I mis-clicked and turned it off right after enabling it (Yay insta-submit web forms!). It won't let me re-enable two-factor auth until tomorrow.
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different? And why would they put the "Done" button up by the first password field and not give you any indication that you need to scroll past the "Done" button and fill out a second password field with the same password?
-
This isn't newsworthy at all.
Mainly because Yahoo ALREADY lost billions of account credentials.
-
@mott555 said in Thanks Yahoo. Glad you're on top of things:
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different? And why would they put the "Done" button up by the first password field and not give you any indication that you need to scroll past the "Done" button and fill out a second password field with the same password?
Toby fair, most email apps do this as well, except they hide it behind a "my outgoing mail server requires a..." wait a moment, it's the same regardless of client!
I suppose mail clients play it safe by default? Only a few seem to make the assumption on first try...
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@mott555 said in Thanks Yahoo. Glad you're on top of things:
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different? And why would they put the "Done" button up by the first password field and not give you any indication that you need to scroll past the "Done" button and fill out a second password field with the same password?
Toby fair, most email apps do this as well, except they hide it behind a "my outgoing mail server requires a..." wait a moment, it's the same regardless of client!
I suppose mail clients play it safe by default? Only a few seem to make the assumption on first try...
indeed. there once was a time where you had different services for incomming mail versus outgoing and the servers themselves tended to be on separate physical boxes.... not so common that these days, but apps are slow to adopt new standards because every change.... well....
-
@accalia said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@mott555 said in Thanks Yahoo. Glad you're on top of things:
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different? And why would they put the "Done" button up by the first password field and not give you any indication that you need to scroll past the "Done" button and fill out a second password field with the same password?
Toby fair, most email apps do this as well, except they hide it behind a "my outgoing mail server requires a..." wait a moment, it's the same regardless of client!
I suppose mail clients play it safe by default? Only a few seem to make the assumption on first try...
indeed. there once was a time where you had different services for incomming mail versus outgoing and the servers themselves tended to be on separate physical boxes.... not so common that these days, but apps are slow to adopt new standards because every change.... well....
imap.mail.yahoo.com and smtp.mail.yahoo.com?
IMAP server settings for Yahoo Mail | Yahoo Help - SLN4075
Benefit from the latest technology provided by Yahoo for third party email apps with IMAP. Find out the IMAP settings and port numbers for mobile mail apps and desktop mail client.
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@accalia said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@mott555 said in Thanks Yahoo. Glad you're on top of things:
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different? And why would they put the "Done" button up by the first password field and not give you any indication that you need to scroll past the "Done" button and fill out a second password field with the same password?
Toby fair, most email apps do this as well, except they hide it behind a "my outgoing mail server requires a..." wait a moment, it's the same regardless of client!
I suppose mail clients play it safe by default? Only a few seem to make the assumption on first try...
indeed. there once was a time where you had different services for incomming mail versus outgoing and the servers themselves tended to be on separate physical boxes.... not so common that these days, but apps are slow to adopt new standards because every change.... well....
imap.mail.yahoo.com and smtp.mail.yahoo.com?
Benefit from the latest technology provided by Yahoo for third party email apps with IMAP. Find out the IMAP settings and port numbers for mobile mail apps and desktop mail client.
saw that one coming. I bet Yahoo doesn't even know what servers in their data center those boxes actually are. they probably have thousands of servers in there doing absolutely nothing but they don't dare turn off because they don't know that the servers aren't doing anything....
they probably haven't actually upgraded their infrastructure in fifteen years.
-
An interesting situation where a company has a lot of tempting user data from its glorious past but no longer has the resources to fight the demanding security war.
This will be even more hilarious when Facebook or Google lose their dominant position and their data will be stolen by scavengers.
(And they will die at some point. Even the Roman Empire did not last forever)
-
While a Verizon group led by AOL Chief Executive Officer Tim Armstrong is still focused on integration planning to get Yahoo up and running, another team, walled off from the rest, is reviewing the breach disclosures and the company’s options
Why is Verizon trying to put themself out of business?
Yahoo? AOL? What's next? Radio Shack?
http://i.imgur.com/JaRvrEl.png
-
@mott555 said in Thanks Yahoo. Glad you're on top of things:
I also found out that the Android email app requires you to put your password in twice, one for outgoing, one for incoming. Why would those ever be different?
I used to need that separated due to dumb misconfigurations.
-
@accalia said in Thanks Yahoo. Glad you're on top of things:
they probably haven't actually upgraded their infrastructure in fifteen years.
They'll have tried to replace like for like (except faster). If the machines were ever separate, they'll be separate now because nobody dares try to figure out if they can be merged. Or they're really the same machine now, but kept as separate names so that they don't have to be the same machine in the future. I've seen both scenarios.
-
@El_Heffe said in Thanks Yahoo. Glad you're on top of things:
Why is Verizon trying to put themself out of business?
Because they really want to have control over Tumblr.
-
Yahoo wanted to tell me something...
I guess I'm a moderator of a group?
Guess we'll find out...
-
This post is deleted!
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
I guess I'm a moderator of a group?
It says "moderators and members." I got one of those (actually it was probably the previous email referred to by "last month we notified you"), and I'm definitely not a moderator. Thing is, every group I'm a member of has abandoned Yahoo, because "better align with user habits" is a blatant, pants-on-fire lie; users hate Yahoo's changes.
-
@HardwareGeek said in Thanks Yahoo. Glad you're on top of things:
"better align with user habits"
What that means... Everyone is leaving Yahoo so they're aligning with user habits by deleting all content.
-
@accalia Still very common, AFAICT, but sometimes, it's all hidden away behind network edge load balancers etc.
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Guess we'll find out...
Or not. Either the queue is uber long or the groups I'm in are so massive the Yahoo who's exporting can't by type the messages out.
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Guess we'll find out...
Or not. Either the queue is uber long or the groups I'm in are so massive the Yahoo who's exporting can't by type the messages out.
I'm going with that. Since everyone is now panicking since the messages are being deleted in just a couple days.
When I exported my groups (that I'm an admin of) to groups.io (pay the money, get them to copy everything you want), that took almost a week for one group.
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
the groups I'm in are so massive
Lol nope! Let's see what's in the box!
Ya know, I still have my EyeFi card. Basically nonfunctional, mind you, but it does technically work kinda.
WTF is a "mbox" file?
Oh $deity is it literally just a
catof all the messages stuffed together?!?!?
-
@Tsaukpaetra what's wrong with that?
-
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Oh $deity is it literally just a cat of all the messages stuffed together?!?!?
Unlike all those other mailboxes which are just... your messages stuffed together?
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Oh $deity is it literally just a cat of all the messages stuffed together?!?!?
Well you know, that's how email, and therefore "groups", works.
They made it this way in the 1982 and that's what we're sticking with.
https://cdn3.volusion.com/tyzky.ynqff/v/vspfiles/photos/1097-2.jpg
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
the groups I'm in are so massive
Lol nope! Let's see what's in the box!
Ya know, I still have my EyeFi card. Basically nonfunctional, mind you, but it does technically work kinda.
WTF is a "mbox" file?
Oh $deity is it literally just a
catof all the messages stuffed together?!?!?Almost, but not quite.
See the
From cobaltwolf...line? That's not actually part of the message itself, unlike theFrom: "cobaltwolf...line, which is a message header.
From ...(without a colon) marks the start of a new message. If you look through the messages, you're likely to find a line in the body of a message beginning with>From. The>is inserted (silently, by modern mail clients) to prevent the line from being misinterpreted as the start of a new message and silently hidden (by modern mail clients) when displaying the message. (Mostly. Naturally, some clients are buggy and irreversibly corrupt the message.)mbox isn't the only mail storage format. Maildir and variants store messages as individual files in a set of folders.
-
-
@Luhmann said in Thanks Yahoo. Glad you're on top of things:
mbob
-
@loopback0
but then without the song
-
-
@loopback0 said in Thanks Yahoo. Glad you're on top of things:
without the song
The only way to enjoy Hanson
-
@Luhmann said in Thanks Yahoo. Glad you're on top of things:
@loopback0 said in Thanks Yahoo. Glad you're on top of things:
without the song
The only way to enjoy Hanson
I could’ve thought of some different ways back when I was a wee 13 year old.
-
@Gąska said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra what's wrong with that?
Nothing. I just need to manually sift through them or figure out how to spit them into individual eml files.
@PleegWat said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
WTF is a "mbox" file?
A mailbox.
Thanks, Fargo.
@loopback0 said in Thanks Yahoo. Glad you're on top of things:
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Oh $deity is it literally just a cat of all the messages stuffed together?!?!?
Unlike all those other mailboxes which are just... your messages stuffed together?
I don't know about you, but my mailbox is a folder full of messages.
@anonymous234 said in Thanks Yahoo. Glad you're on top of things:
Well you know, that's how email, and therefore "groups", works.
#notMyEmail
@HardwareGeek said in Thanks Yahoo. Glad you're on top of things:
mbox isn't the only mail storage format. Maildir and variants store messages as individual files in a set of folders.
Thanks for not gaslighting me.
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
Thanks for not gaslighting me.
gaslight: [verb] to attempt to make (someone) believe that he or she is going insane
No need.
-
-
For the last time, the kink thread is
!
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
I just need to manually sift through them
I believe Thunderbird can import .mbox files.
-
@Zerosquare It really should be able to do that, as that's its internal storage format. (Plus some sort of indexing file so that picking a message out of the file, even if it is thousands of messages long, remains quick. I know how I'd do that, but I don't know how TB does it despite using it for email for a very long time.)
-
@dkf said in Thanks Yahoo. Glad you're on top of things:
@Zerosquare It really should be able to do that, as that's its internal storage format. (Plus some sort of indexing file so that picking a message out of the file, even if it is thousands of messages long, remains quick. I know how I'd do that, but I don't know how TB does it despite using it for email for a very long time.)
Sqlite, I think?
-
@dkf said in Thanks Yahoo. Glad you're on top of things:
even if it is thousands of messages long
I speak from experience:
-
@HardwareGeek said in Thanks Yahoo. Glad you're on top of things:
I speak from experience:
Impressive!
Edit: Impressive Nodebb for not showing it in the original post but parsing the quote correctly
Edit Edit: why doesn't a post edit show up until you refresh the page? What is this 1999?
-
@Luhmann That doesn't include the 30k+ I have bothered sorting into folders by subject.
-
@Luhmann said in Thanks Yahoo. Glad you're on top of things:
Edit Edit: why doesn't a post edit show up until you refresh the page? What is this 1999?
See also: Edited posts don't refresh
-
@HardwareGeek said in Thanks Yahoo. Glad you're on top of things:
@dkf said in Thanks Yahoo. Glad you're on top of things:
even if it is thousands of messages long
I speak from experience: I've seen this many times, but I don't get how people can live with that many emails marked as unread. My inbox is 100% marked as read.
Personally, if an email is marked unread, for me that means it requires my attention. Spam mails get deleted, emails I don't really care about and don't read but might still be relevant at some point so I can't delete them get marked as read. If I did read something and need to act on it but don't have the time right now, it gets marked as unread again so I know there's things left to do.
-
@topspin Sure, it's marked as "read", but is it marked as "archived"?
(Curse you, Gmail, for introducing this concept)
-
@Tsaukpaetra said in Thanks Yahoo. Glad you're on top of things:
a folder full of messages
messages as individual files in a set of foldersSo a hundred thousand tiny files? Ewwww.
-
@topspin said in Thanks Yahoo. Glad you're on top of things:
My inbox is 100% marked as read.
Me too.
@topspin said in Thanks Yahoo. Glad you're on top of things:
If I did read something and need to act on it but don't have the time right now, it gets
marked as unread againflagged for follow up so I know there's things left to do.
Yahoo! says! hackers! stole! ONE! BEELLION! user! accounts!
