4 ms·
From the text: "For example, we employ rate limits around sensitive actions, such as requesting money, to prevent them from being abused at scale."
by relate 13y ago
From the text:
"For example, we employ rate limits around sensitive actions, such as requesting money, to prevent them from being abused at scale."
- sillysaurus3 13y agoThey don't appear to be rate limiting their API that allows enumeration of first and last names. Also, We’d also like to address the claim of a “leaked” list of Coinbase emails and user names. This list (the size of which is less than one half of one percent of Coinbase users) was not the result of a data breach at Coinbase. There are 2,040 names on the leaked list. Fun fact: that means there are about 408,000 Coinbase users total.
- MichaelGG 13y agoThe list duplicates every entry, probably another silly tactic by the "attacker" to fluff up his feathers.
- sillysaurus3 13y agoI wonder if that means there are around 200,000 Coinbase users? Depends whether they noticed the dupes. Good catch.
- trevorcreech 13y agoActually over a million: http://blog.coinbase.com/post/78016535692/a-major-coinbase-milestone-1-million-consumer-wallets http://blog.coinbase.com/post/78016535692/a-major-coinbase-m...
- sillysaurus3 13y agoThat's wallets, not users. That press release was impressive, and I've always wondered how many users they actually had. I didn't expect to find out through a security blog post, but it's fun to know.