document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2024-12-26 21:30:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

已翻译 by小眼儿

Browse Source 
Signed-off-by: tinyeyeser <tinyeyeser@gmail.com>
This commit is contained in:
tinyeyeser 2015-01-28 08:54:35 +08:00
parent 2539cba212
commit 226fcd1cc5
2 changed files with 51 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
sources/news/20150126 Data of 20 Million Users Stolen from Dating Website.md
View File

@ -1,52 +0,0 @@
翻译中 by小眼儿
Data of 20 Million Users Stolen from Dating Website
----------
*Info includes Gmail, Hotmail and Yahoo emails*
![Details could belong to users of online dating website Topface](http://i1-news.softpedia-static.com/images/news2/Data-of-20-Million-Users-Stolen-from-Dating-Website-471179-2.jpg)
#A database containing details of more than 20 million users of an online dating website has been allegedly stolen by a hacker.
It is unclear at the moment if the information has been dumped into the public domain, but someone using the online alias “Mastermind” claims to have it, according to a post on an undisclosed paste site.
#List contains hundreds of domains from all over the world
The individual claims that the details are 100% valid and Daniel Ingevaldson, Chief Technology Officer at Easy Solutions, said in a blog post on Sunday that the list included email addresses from Hotmail, Yahoo and Gmail.
Easy Solutions is a US-based company that provides security products for detecting and preventing cyber fraud across different computer platforms.
According to Ingevaldson, the list contains over 7 million credentials from Hotmail, 2.5 million from Yahoo, and 2.2 million from Gmail.com.
It is unclear if “credentials” refers to usernames and passwords that can be used to access the email accounts or the account of the dating website. Also, it is unknown whether the database stored the passwords in a secure manner or if they were available in plain text.
An email address is often used as the username for an online service, to which the user can log in with a unique password. However, password recycling is a common practice for many users and the same string could be used to sign in to multiple online accounts.
“The list appears to be international in nature with hundreds of domains listed from all over the world. Hackers and fraudsters are likely to leverage stolen credentials to commit fraud not on the original hacked site, but to use them to exploit password re-use to automatically scan and compromise other sites including banking, travel and email providers,” [says Ingevaldson](1).
#More information is expected to emerge
According to our sources, the affected website is Topface, an online dating location that touts over 90 million users. The business is headquartered in Sankt Petersburg, Russia, and it advertises that more than 50% of its users are from outside Russia.
We contacted Topface to confirm or deny whether they suffered a breach recently that could have resulted in exposing a database this big; we are yet to receive an answer from the company.
The credentials could have been stolen without perpetrators needing to gain unauthorized access, as Easy Solutions draws attention to the fact that email phishing may also have been used to get the info straight from the clients of the website.
Easy Solutions could not be contacted through the online form available on its website, but we tried alternative communication and are currently waiting for more details.
--------------------------------------------------------------------------------
via:http://news.softpedia.com/news/Data-of-20-Million-Users-Stolen-from-Dating-Website-471179.shtml
本文发布时间:26 Jan 2015, 10:20 GMT
作者：[Ionut Ilascu][a]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
[a]:http://news.softpedia.com/editors/browse/ionut-ilascu
[1]:http://newblog.easysol.net/dating-site-breached/

51
translated/news/20150126 Data of 20 Million Users Stolen from Dating Website.md Normal file
View File

@ -0,0 +1,51 @@
2000万用户网站数据遭泄露
----------
*泄露数据包括Gmail、Hotmail以及Yahoo邮箱*
![泄露的数据很可能来自于线数据网站Topface](http://i1-news.softpedia-static.com/images/news2/Data-of-20-Million-Users-Stolen-from-Dating-Website-471179-2.jpg)
#一名黑客非法窃取了在线数据网站Topface一个包含2000万用户资料的数据库。
目前并不清楚这些数据是否已经公开，但是根据某些未公开页面的消息说，某个使用在线代理工具“Mastermind”的人声称掌握着这些数据。
#泄露数据列表涵盖了全世界数百个域名
此人号称泄露数据的内容100%可用，而Easy Solutions的CTO，Daniel Ingevaldson 周日在一篇博客中说道，泄露数据包括Hotmail、Yahoo和Gmail等邮箱地址。
Easy Solutions是一家位于美国的公司，提供多个不同平台的网络检测与安全防护产品。
据Ingevaldson所说，泄露的数据中，700万来自于Hotmail，250万来自于Yahoo，220万来自于Gmail.com。
我们并不清楚这些数据是可以直接登录邮箱账户的用户名密码，还是只是登录数据网站的账户。另外，也不清楚这些数据在数据库中是加密状态还是明文存在的。
邮箱地址常常被用于在线网站的登录用户名，用户可以凭借唯一密码进行登录。然而重复使用同一个密码是许多用户的常用作法，同一个密码可以登录许多在线账户。
[Ingevaldson 还说](1)：“看起来，这些数据事实上涵盖了全世界数百个域名。除了原始的被黑的网页，黑客和不法分子很可能利用窃取的帐密进行暴库、自动扫描、危害包括银行业、旅游业以及email提供商在内的多个网站。”
#预计将披露更多信息
据我们的多个消息源爆料，数据的泄露源就是Topface，一个包含9000万用户的在线数据网站。其总部位于俄罗斯圣彼得堡，超过50%的用户来自于俄罗斯以外的国家。
我们联系了Topface，向他们求证最近是否遭受了可能导致如此大量数据泄露的网络攻击；但目前我们仍未收到该公司的回复。
攻击者可能无需获得非法访问权限就窃取了这些数据，Easy Solutions 推测攻击者很可能针对网站客户端使用钓鱼邮件直接获取到了用户数据。
我们无法通过Easy Solutions的在线网站联系到它们，但我们已经尝试通过其他交互方式联系了它们，目前正在等待更多信息的披露。
--------------------------------------------------------------------------------
via:http://news.softpedia.com/news/Data-of-20-Million-Users-Stolen-from-Dating-Website-471179.shtml
本文发布时间:26 Jan 2015, 10:20 GMT
作者：[Ionut Ilascu][a]
译者：[Mr小眼儿](https://github.com/tinyeyeser)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
[a]:http://news.softpedia.com/editors/browse/ionut-ilascu
[1]:http://newblog.easysol.net/dating-site-breached/