4 ms·

Dataset for sale: [redacted] Similar data structure: https://stackblitz.com/edit/angular-soswe4?file=src%2Fapp%2Fapp.component.ts https://stackblitz.com/edit/a

Dataset for sale: [redacted] Similar data structure: https://stackblitz.com/edit/angular-soswe4?file=src%2Fapp%2Fapp.component.ts https://stackblitz.com/edit/angular-soswe4?file=src%2Fapp%2F... Owner works for: https://covve.com https://covve.com Covve: This simple yet state-of-the-art app will revolutionise your business relations like you've never seen. Edit: Response: https://twitter.com/covve/status/1261287954967941120 https://twitter.com/covve/status/1261287954967941120

eganist 6y ago
The responses to the comment just below you (https://news.ycombinator.com/item?id=23190102 https://news.ycombinator.com/item?id=23190102) (and the nature of some of the corporate hits I've seen) seem to be consistent with a contacts database of sorts. Not sure I'd go so far as to accuse a specific company on a public forum. But in this regard, the idea that a contact management app could be behind this DB is plausible.
- eganist 6y ago
  Adding: this dump appears to be from a source with data at least as recent as April 2019 based on a dataset I'm working with.
mattlondon 6y ago
Forked the stackblitz for posterity https://stackblitz.com/edit/angular-3nxvlm?file=src/app/app.component.ts https://stackblitz.com/edit/angular-3nxvlm?file=src/app/app....
Redoubts 6y ago
Oh man, what is even going on with that raid forum.
- Nextgrid 6y ago
  A quick glance suggests there's barely any skill in there and it's all bottom-feeders so you'd expect this to be an easy bust for law enforcement worldwide and yet they seem to be happily operating with total impunity for quite some time.
  - blaser-waffle 6y ago
    Noobs and relatively skill makes me think H O N E Y P O T
    - tialaramex 6y ago
      No, more likely it's like street corner drug dealing, or say, the industrial area near me that has street walkers (well I presume it doesn't now because neither street walkers nor their johns want to die of COVID-19) This stuff happens, at a low level, and prosecuting it is expensive and makes little real difference so why bother? It's not even like busting shop lifters and petty burglars where at least you make the victim feel better by arresting somebody even if it likely isn't cost effective overall.
      - alexpotato 6y ago
        I remember one of the online British banks writing up a whole detailed post on how they knew exactly who has been stealing money from them. They wrote up all of their information and sent it to the police who came back with: "Yeah, thanks. Here's the thing: this is non-violent crime and the total amount stolen is less than GBP 100,000" (don't remember the exact number but something thereabouts). People like to think that the police are salivating for every crime that could come through the door. More realistically, they are an overworked group with less resources than they need to tackle and or solve many of the cases they are presented with. Plus, just like you, they have to prioritize their work based on various dimensions of incentives such as what looks good to their boss, what is hard vs easy etc. For example, do you tackle the case that is small and easy to close with not a lot of publicity or the big case that may be harder to close but will net big wins in the PR budget?
        Scoundreller 6y ago
        Usually in that situation you could sue the person in court. Easier to prove too.
      - ta17711771 6y ago
Nextgrid 6y ago
The metadata in the breached records like "Imported from EverContacts" or similar supports the theory that it comes from a contacts app.
- dmix 6y ago
  Curious why it has people's Github and Pintrest accounts when it's contact data. Looks like it was mined from somewhere and combined with other data... Unless people are putting their github urls in the contact apps?
  - stedaniels 6y ago
    A lot of CRMs are enriched with social media accounts and their web of connections.
    - iamacyborg 6y ago
      Stuff like Clearbit can "enrich" a profile with social accounts like Facebook, Twitter, LinkedIn and Github. https://clearbit.com/attributes https://clearbit.com/attributes That entire market needs to be killed off with hefty fines.
viro 6y ago
thank you
amatecha 6y ago
haha, I found exactly the same! https://twitter.com/amatecha/status/1261231178423517184 https://twitter.com/amatecha/status/1261231178423517184 A user who replied to me also shared some anecdotes that indicate further evidence towards that being the source (a private email address only used for GSuite admin purposes, on her iOS device, upon which she had Covve installed) -- thread here https://twitter.com/angelalgibson/status/1261314415829237761 https://twitter.com/angelalgibson/status/1261314415829237761
- amatecha 6y ago
  Covve has actually made a post and confirmed it was indeed their server that was breached: https://covve.com/opinion/security-incident/ https://covve.com/opinion/security-incident/

eganist 6y ago

The responses to the comment just below you (https://news.ycombinator.com/item?id=23190102 https://news.ycombinator.com/item?id=23190102) (and the nature of some of the corporate hits I've seen) seem to be consistent with a contacts database of sorts. Not sure I'd go so far as to accuse a specific company on a public forum. But in this regard, the idea that a contact management app could be behind this DB is plausible.

eganist 6y ago
Adding: this dump appears to be from a source with data at least as recent as April 2019 based on a dataset I'm working with.

mattlondon 6y ago

Forked the stackblitz for posterity https://stackblitz.com/edit/angular-3nxvlm?file=src/app/app.component.ts https://stackblitz.com/edit/angular-3nxvlm?file=src/app/app....

Redoubts 6y ago

Oh man, what is even going on with that raid forum.

Nextgrid 6y ago
A quick glance suggests there's barely any skill in there and it's all bottom-feeders so you'd expect this to be an easy bust for law enforcement worldwide and yet they seem to be happily operating with total impunity for quite some time.
- blaser-waffle 6y ago
  Noobs and relatively skill makes me think H O N E Y P O T
  - tialaramex 6y ago
    No, more likely it's like street corner drug dealing, or say, the industrial area near me that has street walkers (well I presume it doesn't now because neither street walkers nor their johns want to die of COVID-19) This stuff happens, at a low level, and prosecuting it is expensive and makes little real difference so why bother? It's not even like busting shop lifters and petty burglars where at least you make the victim feel better by arresting somebody even if it likely isn't cost effective overall.
    - alexpotato 6y ago
      I remember one of the online British banks writing up a whole detailed post on how they knew exactly who has been stealing money from them. They wrote up all of their information and sent it to the police who came back with: "Yeah, thanks. Here's the thing: this is non-violent crime and the total amount stolen is less than GBP 100,000" (don't remember the exact number but something thereabouts). People like to think that the police are salivating for every crime that could come through the door. More realistically, they are an overworked group with less resources than they need to tackle and or solve many of the cases they are presented with. Plus, just like you, they have to prioritize their work based on various dimensions of incentives such as what looks good to their boss, what is hard vs easy etc. For example, do you tackle the case that is small and easy to close with not a lot of publicity or the big case that may be harder to close but will net big wins in the PR budget?
      - Scoundreller 6y ago
        Usually in that situation you could sue the person in court. Easier to prove too.
    - ta17711771 6y ago

Nextgrid 6y ago

The metadata in the breached records like "Imported from EverContacts" or similar supports the theory that it comes from a contacts app.

dmix 6y ago
Curious why it has people's Github and Pintrest accounts when it's contact data. Looks like it was mined from somewhere and combined with other data... Unless people are putting their github urls in the contact apps?
- stedaniels 6y ago
  A lot of CRMs are enriched with social media accounts and their web of connections.
  - iamacyborg 6y ago
    Stuff like Clearbit can "enrich" a profile with social accounts like Facebook, Twitter, LinkedIn and Github. https://clearbit.com/attributes https://clearbit.com/attributes That entire market needs to be killed off with hefty fines.

viro 6y ago

thank you

amatecha 6y ago

haha, I found exactly the same! https://twitter.com/amatecha/status/1261231178423517184 https://twitter.com/amatecha/status/1261231178423517184 A user who replied to me also shared some anecdotes that indicate further evidence towards that being the source (a private email address only used for GSuite admin purposes, on her iOS device, upon which she had Covve installed) -- thread here https://twitter.com/angelalgibson/status/1261314415829237761 https://twitter.com/angelalgibson/status/1261314415829237761

amatecha 6y ago
Covve has actually made a post and confirmed it was indeed their server that was breached: https://covve.com/opinion/security-incident/ https://covve.com/opinion/security-incident/