Το Yahoo επιβεβαίωσε τη κλοπή στοιχείων από 500 εκατομμύρια λογαριασμούς

σήμερα το πρωί έλαβα και εγώ mail αλλά από το 2014 μέχρι σήμερα 2016 , 2 ολόκληρα χρόνια σε αφασία  ?

Διάβασα την είδηση και άλλαξα pass, αλλά είναι απαράδεκτη η χρονική καθυστέρηση.

Για μένα αυτό ήταν και το κερασάκι στην τούρτα για το yahoo, καθώς το ui του yahoo είναι ελεεινό και πάναργο, αλλά τι να κάνω που έχω το account σχεδόν 20 χρόνια και μου είναι εξαιρετικά δύσκολο και χρονοβόρο να κάνω migrate....

Γι'αυτό η Yahoo μέχρι να κάνεις login σου ζητάει μόνιμα να αλλάξεις password.

Yahoo Security Notice December 14, 2016

https://help.yahoo.com/kb/account/SLN27925.html?impressions=true

Παράθεση

Law enforcement provided Yahoo in November 2016 with data files that a third party claimed was Yahoo user data. We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. Yahoo has not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016. We are notifying potentially affected users and have taken steps to secure their accounts, including requiring users to change their passwords. Yahoo has also invalidated unencrypted security questions and answers so that they cannot be used to access an account.

Separately, our outside forensic experts have been investigating the creation of forged cookies that could allow an intruder to access users’ accounts without a password. Based on the ongoing investigation, the outside forensic experts have identified user accounts for which they believe forged cookies were taken or used in 2015 or 2016. The company is notifying the affected account holders, and has invalidated the forged cookies. We have connected some of this activity to the same state-sponsored actor believed to be responsible for the data theft we disclosed on September 22, 2016.

κλπ , κλπ