4 ms·
They don't appear to be rate limiting their API that allows enumeration of first and last names. Also, We’d also like to address the claim of a “leaked” list
by sillysaurus3 13y ago
They don't appear to be rate limiting their API that allows enumeration of first and last names. Also,
We’d also like to address the claim of a “leaked” list of Coinbase emails and user names. This list (the size of which is less than one half of one percent of Coinbase users) was not the result of a data breach at Coinbase.
There are 2,040 names on the leaked list. Fun fact: that means there are about 408,000 Coinbase users total.
- MichaelGG 13y agoThe list duplicates every entry, probably another silly tactic by the "attacker" to fluff up his feathers.
- sillysaurus3 13y agoI wonder if that means there are around 200,000 Coinbase users? Depends whether they noticed the dupes. Good catch.
- trevorcreech 13y agoActually over a million: http://blog.coinbase.com/post/78016535692/a-major-coinbase-milestone-1-million-consumer-wallets http://blog.coinbase.com/post/78016535692/a-major-coinbase-m...
- sillysaurus3 13y agoThat's wallets, not users. That press release was impressive, and I've always wondered how many users they actually had. I didn't expect to find out through a security blog post, but it's fun to know.