One Article Review
| Source |  Errata Security |
|---|---|
| Identifiant | 1020132 |
| Date de publication | 2019-02-08 10:08:18 (vue: 2019-02-09 15:01:55) |
| Titre | How Bezo\'s dick pics might\'ve been exposed |
| Texte | In the news, the National Enquirer has extorted Amazon CEO Jeff Bezos by threatening to publish the sext-messages/dick-pics he sent to his mistress. How did the National Enquirer get them? There are rumors that maybe Trump's government agents or the "deep state" were involved in this sordid mess. The more likely explanation is that it was a simple hack. Teenage hackers regularly do such hacks -- they aren't hard.This post is a description of how such hacks might've been done.To start with, from which end were they stolen? As a billionaire, I'm guessing Bezos himself has pretty good security, so I'm going to assume it was the recipient, his girlfriend, who was hacked.The hack starts by finding the email address she uses. People use the same email address for both public and private purposes. There are lots of "people finder" services on the Internet that you can use to track this information down. These services are partly scams, using "dark patterns" to get you to spend tons of money on them without realizing it, so be careful.Using one of these sites, I quickly found a couple of a email accounts she's used, one at HotMail, another at GMail. I've blocked out her address. I want to describe how easy the process is, I'm not trying to doxx her. Next, I enter those email addresses into the website http://haveibeenpwned.com to see if hackers have ever stolen her account password. When hackers break into websites, they steal the account passwords, and then exchange them on the dark web with other hackers. The above website tracks this, helping you discover if one of your accounts has been so compromised. You should take this opportunity to enter your email address in this site to see if it's been so "pwned".I find that her email addresses have been included in that recent dump of 770 million accounts called "Collection#1". The http://haveibeenpwned.com won't disclose the passwords, only the fact they've been pwned. However, I have a copy of that huge Collection#1 dump, so I can search it myself to get her password. As this output shows, I get a few hits, all with the same password. At this point, I have a password, but not necessarily the password to access any useful accounts. For all I know, this was the |
| Envoyé | Oui |
| Condensat | access accounts actors addresses all are assume been bezo celebrity consider conspiracy corrupt dick didn doesn donald email enforcement even exposed fairly find fully gain get getting hack hackers her how however iittle important information internet law like look mean might nation nude officials out password passwords pay people phishing pics post:no public real reason reuse sensitive simple some state stolen such summarize test them theories though through time trump try way who would |
| Tags | Hack |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.