Technology

55702 readers

4076 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

296

User data stolen from genetic testing giant 23andMe is now for sale on the dark web (www.businessinsider.com)

submitted 9 months ago by L4s to c/technology

32 comments fedilink hide all child comments

User data stolen from genetic testing giant 23andMe is now for sale on the dark web::User data from 23andMe accounts has been leaked and put up for sale on a dark web forum after what appeared to be a "credential stuffing" cyberattack.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 9 months ago (1 children)

If you think that IP blocking stops credential stuffing you really are out of your depth.

Would it stop this guy if he was some skid just running Kali? Absolutely.

But it ain't going to stop anyone more determined. Especially since you're going to let those blocks expire to avoid blocking legitimate customers. A patient opposition with minimal resources will get by that kind of naive approach.

Not only that but you have 0 evidence they didn't IP block. They absolutely could have standard protocols in place but anything short of 2fa is inherently vulnerable.

[–] [email protected] -4 points 9 months ago (1 children)

If you want to move goalposts... Then fine. But I won't engage in that bullshit.

It IS trivial to implement. It is literally a non-zero thing they could have implemented but chose not to. That's all I've claimed.

Go strawman someone else.

If you think that IP blocking stops credential stuffing you really are out of your depth.

You can slow it way the fuck down though if you do it right. But nah, I'm out of my depth supposedly. You sound like a fucking tool.

[–] akrot 3 points 9 months ago

I think what he was trying to say, implementing those strategies would deter 90% of rookies (using kali toolkit as a service), but not the 10% who got the right technical knowledge and enough motivation to clamp down on what they want.