jimmyLi's blog

  Yahoo confirmed that approximately 400,000 accounts were compromised as a result of a hack by a group calling themselves the D33D Company. According to CNET , the credentials were stored in plain text and were allegedly taken from a Yahoo subdomain, Yahoo Voices. The group claims to have breached Yahoo's security by using a "union-based SQL injection technique." Yahoo released this statement to Tech Crunch : At Yahoo! we take security very seriously and invest heavily in protective measures to ensure the security of our users and their data across all our products. We confirm that an older file from Yahoo! Contributor Network (previously Associated Content) containing approximately 400,000 Yahoo! and other company users names and passwords was stolen yesterday, July 11. Of these, less than 5% of the Yahoo! accounts had valid passwords. We are fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Y...