Quora has beaten by security infraction - Being hacked up to 100 million users' data ...!!!
"We are writing to let you know that we recently discovered that some user data was compromised as a result of unauthorized access to our systems by a malicious third party." - this is the mail from Quora to all of its users and requested to change their password soon.
The user's data are basically account information, names, email addresses, IP addresses, user IDs, encrypted passwords, user account settings, personalization data, public actions and content (including drafts) such as questions, answers, comments, blog posts and up-votes when authorized by users may have been compromised, it said. If you are a Quora user who contributed to the systems anonymously then your data will not have been impacted simply because that it does not store identity data of anonymous posters. It's worth noting that the passwords that have been compromised were encrypted and hashed with a salt that will vary from user to user.
The disclosure email contains the usual, and frankly by this point pretty meaningless, apologies for any "concern or inconvenience this may cause" as well as the promises that everyone is working hard to investigate and take steps to prevent it happening again.The investigation is being carried out by the internal Quora security team as well as a third party digital forensics company. Law enforcement has, of course, also been informed. As for the steps being taken, these include the disclosure notification that has already started hitting inboxes around the world and a forced password reset for all users, who will also have been logged out of the system now. Although Quora is not making any public statements with further detail at this point in time, it does say that it has "identified the root cause" of the breach and has...Read More
Comments
Post a Comment