• XSS.stack #1 – первый литературный журнал от юзеров форума

canva

Отслеживать
fantum00 сказал(а):
haveibeenpwned.com

Have I Been Pwned: Who's Been Pwned

Every breached website added to Have I Been Pwned appears here on the Who’s Been Pwned page. As of today, there are 947 breached sites listed.
haveibeenpwned.com haveibeenpwned.com

Compromised data: Email addresses, Geographic locations, Names, Passwords, Usernames
Permalink

Вот только среди
Код: 
DROP TABLE IF EXISTS `user`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `user` (
  `_id` int(11) NOT NULL AUTO_INCREMENT,
  `id` char(11) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
  `creation_date` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `email` varchar(255) DEFAULT NULL,
  `phone_number` varchar(25) DEFAULT NULL,
  `email_status` char(1) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `username` varchar(255) DEFAULT NULL,
  `display_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `first_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `last_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `temporary` bit(1) NOT NULL,
  `roles` varchar(45) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
  `deactivated` bit(1) NOT NULL,
  `ui_info` varchar(255) NOT NULL,
  `homepage` varchar(255) DEFAULT NULL,
  `city` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `country_code` char(2) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `locale` varchar(255) NOT NULL,
  `personal_brand` int(11) DEFAULT NULL,
  `personal_brand_id` char(11) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `avatar` int(11) DEFAULT NULL,
  PRIMARY KEY (`_id`),
  UNIQUE KEY `id` (`id`),
  UNIQUE KEY `id_2` (`id`),
  UNIQUE KEY `email` (`email`),
  UNIQUE KEY `username` (`username`),
  UNIQUE KEY `phone_number` (`phone_number`),
  KEY `personal_brand` (`personal_brand`),
  KEY `personal_brand_id` (`personal_brand_id`)
) ENGINE=InnoDB AUTO_INCREMENT=139494421 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

Я что-то пассвордов не вижу.
Да и по ссылке https://support.canva.com/contact/customer-support/may-24-security-incident-faqs/ пишут, что
The HIBP notification has led some users to ask if their passwords were compromised. The simple answer is no. What was accessed was individually salted and bcrypt-hashed passwords.
пароли (хеши бкрипт, так мило с их стороны понтоваться алгоритмом фронтенда в новостях) не утекли.

Отсюда вопрос. Пароли не утекли или есть более одной базы?
 
Lift сказал(а):
Вот только среди
Код: 
DROP TABLE IF EXISTS `user`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `user` (
  `_id` int(11) NOT NULL AUTO_INCREMENT,
  `id` char(11) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
  `creation_date` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `email` varchar(255) DEFAULT NULL,
  `phone_number` varchar(25) DEFAULT NULL,
  `email_status` char(1) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `username` varchar(255) DEFAULT NULL,
  `display_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `first_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `last_name` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `temporary` bit(1) NOT NULL,
  `roles` varchar(45) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
  `deactivated` bit(1) NOT NULL,
  `ui_info` varchar(255) NOT NULL,
  `homepage` varchar(255) DEFAULT NULL,
  `city` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL,
  `country_code` char(2) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `locale` varchar(255) NOT NULL,
  `personal_brand` int(11) DEFAULT NULL,
  `personal_brand_id` char(11) CHARACTER SET ascii COLLATE ascii_bin DEFAULT NULL,
  `avatar` int(11) DEFAULT NULL,
  PRIMARY KEY (`_id`),
  UNIQUE KEY `id` (`id`),
  UNIQUE KEY `id_2` (`id`),
  UNIQUE KEY `email` (`email`),
  UNIQUE KEY `username` (`username`),
  UNIQUE KEY `phone_number` (`phone_number`),
  KEY `personal_brand` (`personal_brand`),
  KEY `personal_brand_id` (`personal_brand_id`)
) ENGINE=InnoDB AUTO_INCREMENT=139494421 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

Я что-то пассвордов не вижу.
Да и по ссылке https://support.canva.com/contact/customer-support/may-24-security-incident-faqs/ пишут, что

пароли (хеши бкрипт, так мило с их стороны понтоваться алгоритмом фронтенда в новостях) не утекли.

Отсюда вопрос. Пароли не утекли или есть более одной базы?

Хороший вопрос. Я не знаю, я не смотрел на данные, просто хотел бы поделиться здесь
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх