Questions tagged [yahoo]

An American multinational technology company known for its web portal, search engine, and related services like mail and finance portals.

Filter by
Sorted by
Tagged with
78
votes
4answers
20k views

How long will it take to crack the passwords stolen in the Yahoo hack announced 14 Dec 2016?

Apparently Yahoo was hacked yet again with up to a billion user accounts being compromised. The article says Yahoo uses MD5 for password hashing. Are the hackers likely to be able to crack the ...
10
votes
3answers
474 views

Yahoo Security Breach Affecting 500,000,000+ Accounts: Why would they believe it was “state-sponsored”?

It was recently disclosed that private information pertaining to over 500 million Yahoo accounts was stolen. Yahoo's Chief Information Security Officer, Bob Lord, states that the information was ...
8
votes
2answers
10k views

Yahoo mail hacked - how to recover, how did it happen and how to prevent?

I was yesterday informed by some friends that they received spam mails with my name as sender. The sender addresses look like firstnamelastname@spacepc.pt and firstnamelastname@revistaplot.com with ...
7
votes
3answers
1k views

Why does DKIM verification succeed with a signature from Yahoo when all headers are spoofed to look like GMail?

Today I got a scam e-mail which I decided to disect. I quickly found that it was sent from a GMail address (From, Reply-To, Return-Path) but that the mail itself came from Yahoo. HELO from Yahoo ...
4
votes
1answer
124 views

Being directed to hacked site only when searched through Yahoo

A local wolf sanctuary had just posted a warning on Facebook to not visit their site because it had been hacked. However, it only sends you to the hacked site when searching through Yahoo. I was ...
4
votes
1answer
123 views

Odd search engine entries

A customer found about a dozen valid URLs pointing to existing customer related documents at Yahoo. These URLs were not public and certainly not searchable at the customer's site. The documents have ...
4
votes
2answers
1k views

How can an email from a Yahoo address be sent through Yahoo without authentication?

I received this bounced email, yet I have a password with 105 bits entropy, my sign in history only shows local sign ins, I do not have any linked accounts nor apps, and I have not been to ...
4
votes
1answer
15k views

How secure is Yahoo Account Key?

I (along with a billion or so other people) was notified about my Yahoo! account being potentially compromised yesterday. While I'm not worried about that (I have changed my password since then, have ...
3
votes
1answer
473 views

How can one recover from the Yahoo! XSS attack?

Many Yahoo!/SBC Global email accounts have been hijacked via an infamous XSS attack. The accounts are often used to send spam to random members of the user's personal address book. The spam often ...
3
votes
1answer
327 views

Yahoo account “secure” but spam sent from my address

My Yahoo account shows no suspicious activity, only log-ins from my desktop and 2 of my devices. But a friend was spammed twice within a short time today from my email address. I use Yahoo's Account ...
3
votes
3answers
13k views

Yahoo Account hacked, changed pw, spam still going out elsewhere?

Spam emails went out for an hour earlier this week bearing my Yahoo account in the FROM field and going out to all my contacts. I changed the password, then saw (via rejected emails sent to my Yahoo ...
1
vote
1answer
162 views

Why does Yahoo cached results button lead to blacklisted “malicious”/“phishing” IP?

I did a search for some on Yahoo, I then click on the little arrow next to one of the search results and then clicked the Cached button because I wanted to view an older version of the page. It took ...
1
vote
1answer
555 views

Why do scammers use emails like yahoo?

I was doing a Cyber Security and IT audit for a company. I was told that they had very little in terms of fraud protection, one of the only ways that they detected potential fraudsters was by ...
1
vote
0answers
230 views

Yahoo email hack and forged cookies 2016 [closed]

Yahoo, seems to have the worst email security on the planet when they aren't actively writing tools for the NSA to snoop your email. Now they are claiming the "state actor" that hacked 1 billion ...
0
votes
3answers
2k views

Gmail, Yahoo, Hotmail , and so on; How do they check the content of an attached password-protected archived file like Winrar?

How is it possible that mailing systems like Gmail, Yahoo, and Hotmail are able to check the content of an attached password-protected archived file like WINRAR, if the password cannot be guessed, ...
0
votes
1answer
171 views

Recovering locked-out accounts after losing smartphone

Ok so, we've got a situation here that sounds a bit hopeless, but it's happening right now and we could really use some help. Please bear with me here as I try to explain... Recently, my wife and I ...
0
votes
1answer
57 views

Google and yahoo: what criteria do they use to qualify a “new device”?

So, I have two computers and I use my smart phone's internet on those computers. Yahoo during a brief period actually locked me out of my account because "try logging in on a device i normally log in ...
0
votes
1answer
542 views

XSS attempt from Google Captcha at login.yahoo.net? (NoScript)

Recently I tried to login into my Yahoo mail account with Firefox ESR where NoScript showed me this warning when the captcha was shown at the login: NoScript filtered a potential cross-site ...
0
votes
1answer
393 views

What security settings is Yahoo Mail looking for to consider IMAP client secure?

When setting up an IMAP client for Yahoo Mail, Yahoo requires the "Allow apps that use less secure signin" option to be enabled. The client is configured to use SSL for IMAP (and SMTP). What ...
-1
votes
1answer
94 views

What should be done about the billion stolen passwords on Yahoo? [closed]

What can a Yahoo user do about this? http://arstechnica.com/security/2016/12/what-can-you-do-with-a-billion-yahoo-passwords-lots-of-bad-things/ What can you do with a billion Yahoo passwords? Lots ...
-4
votes
1answer
366 views

Spam mail from my yahoo mail [closed]

Couple of days back spam mail(screenshot link) was sent to all my contacts from my yahoo account, and in my account activity page there is a yahoo partner logged in, from Peru (screenshot link) during ...