3 ms·
Yeah, I mostly agree. The most sensitive thing on Wikipedia I would think is the passwords. People often reuse passwords, so a password stolen from Wikipedia c
by Thorrez 7y ago
Yeah, I mostly agree.
The most sensitive thing on Wikipedia I would think is the passwords. People often reuse passwords, so a password stolen from Wikipedia could maybe be reused against the victim's email or bank account.
Another possible sensitive item is the mapping of a username to an email. If there's an edit or account that a government doesn't like, that government might want to find what email is associated with the account, and then use information on that email to arrest the person. (Email accounts often contain phone numbers.) This reminds me of this comment[1], in which a vulnerability in Twitter allowed the Chinese government to map a username to a phone number, and then use that phone number to arrest the person.
[1] https://news.ycombinator.com/item?id=21874040 https://news.ycombinator.com/item?id=21874040