3 ms·
I think I missed it, but how did he get their emails? That part I didn't understand as I was hoping LI didn't expose that...
by bwb 7y ago
I think I missed it, but how did he get their emails? That part I didn't understand as I was hoping LI didn't expose that...
- papreclip 7y ago>Searching on Google, I found the database from the LinkedIn 2012 hack. Each record had a user id and an email without additional information. >The link to the LinkedIn user profile was missing and personal information was lacking. As a result, it was not very useful. I think he is downplaying the value of that hacked database. Without it what would he have? userid and profile url combos...
- bwb 7y agoAh right, just seems silly then, as he is relying on a hacked DB for the most private part.
- Avamander 7y agoYou can also enumerate users based on phone numbers, you don't need the database in that case, 10k numbers per account, probably also somehow resettable but I haven't spent that much time on it because LinkedIn didn't find it an issue.