@Iszi That's the point of "all accounts in a fixed order". If there is an external, non-SE leak, then it is improbable that it would apply to all the accounts. The bot would have to skip some users.
I suppose that they observed a bot doing, say, a few dozens of login attempts for each account, in due order. If one works, then the bot correctly guessed both the email address and the password, which is quite a feat.
If a robber attempts to pick the lock on the front door of every house in a neighborhood you can infer that the one he was able to unlock was less secure than the rest of the houses.
@SmokeDispenser sure, sure, yet he was awfully squimish and didn't want to go into any specifics on anything other than that single piece of information!
I'll concede there's probably other angles for drawing the inference in question that I'm not really considering. But I'm still not really convinced that there's not something fishy going on there. It's an oddly specific statement to make when one should generally be lacking much of the detail required to do so.
@ThomasPornin Also, this isn't really just a matter of security folks being "nosy". A substantial portion of this room was just told that their accounts were subject to a (what I presume is recent) attack in which one of their top members' accounts was compromised. It's extremely reasonable that we should be concerned with the particulars of the attack and what measures are in place to protect our accounts after this.
Hmm. I think it's time to take the transcript, condense the information @Shog9 has given and just figure out possible explanations of szenarios. Then hilight him and ask for confirmation;)
I've been hearing a sound from inside my MSI GE60 laptop for a while now, so I opened it up to find that these two tiny copper waffle squares came loose. They were originally stuck to the board with some black adhesive, so I stuck them on again, but a few days later, they came loose again.
Aft...
ok - I'm frustrated with my memory - last year, SE released a game for each site where the community could manage fake sites by voting what action to take next: ask more questions, answer more questions, close more questions, etc. The "score" was the number of visitors to the site - did I make that all up in my imagination or did that actually happen?
@DavidFreitag He is talking about the @TildalWave spin-off. He got suspended and the whole bot-breach story was thrown, and we do not really know how the two events are related.
What are possible options to prevent employees from uploading confidential files, without restricting upload access to upload pics, videos or personal files?
The question: Authenticating a user via SMS elicited a very interesting comment from the OP after a very new user (<20 days) suggested the question was off-topic.
I don't mean to kick a hornet's nest, but the incessant arguing on StackExchange about what is or isn't an acceptable post is mind...
@Iszi I am just pointing out that when SE claims that there was no breach, they mean it in the sense that there was no breach into the systems under their responsibility, which excludes user account credential guessing.
@SmokeDispenser no no - you misunderstand - it's a bad question, but it also can certainly be improved! But the improvement needs to happen on a deeper level within the asker's understanding of asking questions
I've been hearing a sound from inside my MSI GE60 laptop for a while now, so I opened it up to find that these two tiny copper waffle squares came loose. They were originally stuck to the board with some black adhesive, so I stuck them on again, but a few days later, they came loose again.
Aft...
This recently showed up on Stack Overflow.
What does it mean? Why is this image showing here! What is StackEgg?
What are possible options to prevent employees from uploading confidential files, without restricting upload access to upload pics, videos or personal files?
The question: Authenticating a user via SMS elicited a very interesting comment from the OP after a very new user (<20 days) suggested the question was off-topic.
I don't mean to kick a hornet's nest, but the incessant arguing on StackExchange about what is or isn't an acceptable post is mind...
