Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

> Sayakenahack.com, Who else kena?

views
     
se7en
post Nov 14 2017, 01:55 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

QUOTE(jeff10012003 @ Nov 14 2017, 11:21 AM)
let's kick it up a notch.

found this just now.

se7en

https://pastebin.com/yJr0WUHe

user posted image
*
yes, that is more or less the files from the Maxis dump.
se7en
post Nov 14 2017, 02:04 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

its csv files. postpaid is mark with post_* and prepaid with pre_*

each file contains ~1 million records. Compared to the rest of the telcos, Only the maxis file is broken down this way ie ~1 million records in each file.

The reason is simple - excel has a ~1 million row limit.

That list however is incomplete. The Maxis dump floating around is corrupted. We had to fix the zip archive to get all the data out. From the looks of the pastebin dump, they skipped the corrupted files.
se7en
post Nov 14 2017, 03:16 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

QUOTE(jeff10012003 @ Nov 14 2017, 02:13 PM)
this really shows that maxis have a rather large database of customers.
so far anything have been done by MCMC to cut the database at source?
*
not really, the others probably have better ways of manipulating the files, so they are able to dump > 10 million lines in a single file.

se7en
post Nov 16 2017, 01:09 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

can anybody confirm if the site has been blocked by mcmc? Am getting a service unavailable without google dns.
se7en
post Nov 16 2017, 01:21 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

QUOTE(andrewcha @ Nov 16 2017, 01:15 PM)
Wah kena block mcmc. Got things to do with mcmc? I pray for the guy who make that page. Maybe kena lokap le.
*
Well, i did advise him against putting up the site. Honestly we did consider setting up a cross check site when we first discovered the data breach, but end of the day, its not our data to manipulate. Also, the information contained in data is not the usual email/password that can be easily changed.
se7en
post Nov 16 2017, 01:28 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

QUOTE(agewisdom @ Nov 16 2017, 01:25 PM)
Doesn't the affected party have the right to check whether their data is part of the breach? He did the right thing. The government should be the one that did this, but I'm not at all sure what they're doing.  hmm.gif
*
yes, the affected party has the right, but the check site should be hosted or set up either by the data owners (each telco) or a centralized agency.
se7en
post Nov 16 2017, 03:14 PM

resistance is futile
Group Icon
Admin
1,806 posts

Joined: Jan 2003
From: Captain's Cabin, Black Pearl

QUOTE(janszmatt @ Nov 16 2017, 02:52 PM)
But no one in power is doing shit and diam2 only, then comes along this white hat to bring awareness.
*
yes, we were pushing for the telcos to make a statement, but they turned around and said its under investigation so they can't comment.

we considered putting it up a similar check site when we first got the data, but its still 'stolen' data, so we contacted the telcos again to request for their permission, and again it got turned down.

so yes, keith is the good guy here, but as i had mentioned to him a few weeks back, its a bit of a walking on egg shell situation here which could go either way.

Bump Topic Add ReplyOptions New Topic
 

Change to:
| Lo-Fi Version
0.0204sec    0.99    7 queries    GZIP Disabled
Time is now: 20th December 2025 - 05:22 AM