3 ms·

Can someone summarize this? I think the site is struggling with traffic and I'm getting 503'd...

by jwally 3y ago

Techbrunch 3y ago
Martin Vigo's article discusses the security vulnerabilities in password reset options for various websites and how these can lead to the exposure of personal phone numbers. Vigo highlights that during a password reset process, websites often partially reveal the user's phone number. This partial display varies across websites; some show the last four digits, others the first, and so on. By initiating password resets across different sites, one can potentially piece together most of the digits of a phone number just from an email address.
- _the_inflator 3y ago
  Awesome TLDR; Thx!
  - joeframbach 3y ago
    It's clearly AI generated, blatantly so.
    - Techbrunch 3y ago
      It is but it was proofread by a human with expertise in the domain, and honestly I wouldn't have done better in such a short amount of words. If someone wants to know more they better read the article which I did to make sure the generated text wasn't bullcrap :)
- jasonjayr 3y ago
  ... just an email address, and publicly available information on the phone numbering system assignments + strategies.
swozey 3y ago
Basically what they did was do password reset processes at a bunch of different services like PayPal, LastPass, Ebay.. yeadda yadda. He found that they all display different portions of a phone number. PayPal being the worst shows someone starting the reset process 5 digits. Most showed 2 or 3 but different portions. So what he then did was essentially merge/correlate that data along with the area code and "exchange" (the part of number after area code) from sources like https://www.nationalnanpa.com/ https://www.nationalnanpa.com/ Then he has a python script the queries (not sure how I didn't read the code, I'm assuming NOT through an API but who knows) the aforementioned services and somehow determines the likelihood of a number out of several hundreds being registered to an email or not. I kind of dozed off at the end so I can't explain that part very well. edit: Why am I getting downvoted? This is literally what the blog is. My other comment is at the top.. lol. What a waste of my time giving an explanation. Ya'll like that low detail TechBrunch ChatGPT explanation more? Wild.
- BenjiWiebe 3y ago
  Have an upvote. I preferred your summary. Thanks!
Luc 3y ago
https://web.archive.org/web/20231116163937/https://www.martinvigo.com/email2phonenumber/ https://web.archive.org/web/20231116163937/https://www.marti...

Can someone summarize this? I think the site is struggling with traffic and I'm getting 503'd...

by jwally 3y ago

Can someone summarize this? I think the site is struggling with traffic and I'm getting 503'd...

Martin Vigo's article discusses the security vulnerabilities in password reset options for various websites and how these can lead to the exposure of personal phone numbers. Vigo highlights that during a password reset process, websites often partially reveal the user's phone number. This partial display varies across websites; some show the last four digits, others the first, and so on. By initiating password resets across different sites, one can potentially piece together most of the digits of a phone number just from an email address.

_the_inflator 3y ago
Awesome TLDR; Thx!
- joeframbach 3y ago
  It's clearly AI generated, blatantly so.
  - Techbrunch 3y ago
    It is but it was proofread by a human with expertise in the domain, and honestly I wouldn't have done better in such a short amount of words. If someone wants to know more they better read the article which I did to make sure the generated text wasn't bullcrap :)
jasonjayr 3y ago
... just an email address, and publicly available information on the phone numbering system assignments + strategies.

swozey 3y ago

Basically what they did was do password reset processes at a bunch of different services like PayPal, LastPass, Ebay.. yeadda yadda. He found that they all display different portions of a phone number. PayPal being the worst shows someone starting the reset process 5 digits. Most showed 2 or 3 but different portions. So what he then did was essentially merge/correlate that data along with the area code and "exchange" (the part of number after area code) from sources like https://www.nationalnanpa.com/ https://www.nationalnanpa.com/ Then he has a python script the queries (not sure how I didn't read the code, I'm assuming NOT through an API but who knows) the aforementioned services and somehow determines the likelihood of a number out of several hundreds being registered to an email or not. I kind of dozed off at the end so I can't explain that part very well. edit: Why am I getting downvoted? This is literally what the blog is. My other comment is at the top.. lol. What a waste of my time giving an explanation. Ya'll like that low detail TechBrunch ChatGPT explanation more? Wild.

BenjiWiebe 3y ago
Have an upvote. I preferred your summary. Thanks!

Luc 3y ago

https://web.archive.org/web/20231116163937/https://www.martinvigo.com/email2phonenumber/ https://web.archive.org/web/20231116163937/https://www.marti...