7 ms·
Seems like some hacker leaked all UUIDs. Check if your UUIDs are part of the leak.
by croes 2y ago
Seems like some hacker leaked all UUIDs.
Check if your UUIDs are part of the leak.
- sureIy 2y agoWait till someone files a CVE
- Traubenfuchs 2y agoI am sure our IT security department would jump right on to that if informed of it...
- kibwen 2y agoThis is the biggest hack since every ATM PIN was leaked: https://pastebin.com/SmJRB8eQ https://pastebin.com/SmJRB8eQ
- tombert 2y agoHoly shit, my PIN is on there. How the hell did that get that?? I was told it was a 1/10,000 chance of someone guessing it.
- ethanjstark 2y agoMine too. Takes me back to when my password was leaked: https://github.com/danielmiessler/SecLists/pull/155 https://github.com/danielmiessler/SecLists/pull/155
- 0xbadcafebee 2y agocould we fix this by adding '\n' to the password? then it wouldn't be guessed, the hackers would just think it was the end of the password
- Y_Y 2y agoThat's why I put a newline in my username.
- hk1337 2y agoDon't worry, I already checked your account and there wasn't anything there to take.
- quietbritishjim 2y agoPINs can be up to 6 digits (at least here in the UK, but I doubt it's country specific), even though the ones they give you by default are only ever 4. So that's only a leak of 1% of them.
- extraduder_ire 2y agoDoes that not cause problems on some card machines? I've come across a few that definitely don't let you put in more than four digits.
- jiggawatts 2y agoThat provides very valuable information: DO NOT TRUST this machine to be secure! Similarly, any web site or app that can’t correctly handle a space character at the end of the password should never be trusted with anything of consequence.
- quietbritishjim 2y agoAre you really worried that a card machine is going to leak your PIN? That doesn't seem to be a common attack vector compared to a third-party skimmer being attached or someone just mugging you and demanding your PIN under threat of physical violence. To answer the actual question: I don't know because I left my PIN at 4 digits, despite knowing I could use more, precisely because I didn't think it would really make my life any more secure.
- jiggawatts 2y agoI'm not worried specifically about the PIN leaking. The concern is that a 4-digit max PIN length is certainly implemented by someone who couldn't be bothered to read the spec for secure credit card transaction handling. It's the equivalent of the "No brown M&Ms" clause or "Canary in the coal mine" test. Nobody actually cares about the M&M color or some dumb bird.
- 2y ago
- hamburglar 2y agoHaha, I have a file in my home directory that has every possible SSN because I wanted to be able to tell a friend “I have your SSN in a file on my computer.”
- layer8 2y agoI hope this gets incorporated into haveibeenpwned.com.
- banku_brougham 2y agoWith the way things are at work right now I simply don't have time to mitigate this leak in my personal data security. I've officially given up.
- TZubiri 2y agoNerd hacker politics, but SSN leaks are no joke.
- greggyb 2y agoI had a database of all SSNs for a while, but it was on a work laptop, so I didn't get to keep it.
- cbsks 2y agoHere you go; every SSN: https://github.com/panzertime/every_ssn https://github.com/panzertime/every_ssn
- lxgr 2y agoAgreed: The real joke is any organization using SSNs as an authentication mechanism (as opposed to an identifier).
- TZubiri 2y agoNothing>door>door with lock Both in terms of security, and in the crime of vulnerating it.
- snypher 2y ago>10b82756-f8b4-4fee-a508-adeadbeef5eb Oh well, time to reformat
- Dalewyn 2y ago2016 called, they want their "Side of Beef" jokes back.
- nomilk 2y agoI think this is a joke, but I think it is a problem if someone finds any sensitive uuid here, because the list on this website is a tiny subset of all possible uuids, so it provides a useful rainbow table for anyone attempting brute force attacks. I.e. generating and using random uuids would have an astronomically small success rate, whereas trying the ones on this site may not (depending on where they came from, which I'm not sure of).
- kbhomes 2y agoYou should check out the author's blog post about the site — it is quite literally every UUID, computed and rendered on demand. https://eieio.games/blog/writing-down-every-uuid/ https://eieio.games/blog/writing-down-every-uuid/
- nomilk 2y agoOh.. ha, gotcha. Thanks for explaining. Incidentally, glad uuid's computed on the fly (as opposed to pre-computed) as I think the site would require a very (impossibly?) large database.
- lxgr 2y agoIf it weren't impossible to store 2^122 128 bit values, things would look pretty dire for most cryptographic algorithms we use.
- deleted 2y ago[deleted]
- maronato 2y agoAll possible UUIDs are in this page, it’s not a tiny subset. They are generated by your device on the fly as you move through the list so you can’t really use it as a rainbow table any more than manually creating the table yourself.
- lxgr 2y ago> depending on where they came from, which I'm not sure of They're coming straight out of your processor :) Careful where you scroll: Your password and your crypto wallet recovery phrase are in there somewhere too! (Unless you have one of those fancy 24 word long ones.)
- borplk 2y agoLooking forward to a "havemyuuidsbeenpwned.com" service :))