Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.security > #1342

Re: Giant GMail Hack FINALLY Revealed

Cross-posted to 5 groups.

Show all headers | View raw

On 2025-10-28, c186282 <c186282@nnada.net> wrote:
> https://www.dailymail.co.uk/sciencetech/article-15230351/Gmail-183-MILLION-passwords-data-breach.html
>
> The incident occurred in April but has only just been disclosed
>
> Gmail users have been urged to check their accounts after it
> was revealed that more than 183 million passwords were stolen
> in a data breach.
>
> Australian cyber expert Troy Hunt, who revealed the incident,
> called it a 'vast corpus' of breached data, which totals
> 3.5 terrabytes.
>
> To put that into perspective, that's the equivalent to 875
> full-length HD movies.
>
> According to Mr Hunt, 'all the major providers have email
> addresses in there' – so not just Gmail, but Outlook,
> Yahoo and others too.
>
> 'They're from everywhere you could imagine, but Gmail
> always features heavily,' Hunt told the Daily Mail.
>
> . . .
>
>    I've been saying ... the current online-biz model
>    is NO LONGER SAFE.
>
>    And don't send Goog yer fingerprints either, then
>    the hacks/Vlad will have THOSE too. Biometrics
>    are only as secure as the database holding them
>    and these days, well ......
>
>    When's the last time you actually WENT to your
>    bank ? Does anyone there remember your face ?
>

You’re not wrong to be skeptical — the “trust the cloud” model has always 
relied on the hope that massive databases will stay sealed, and that’s been 
proven false again and again. Centralized storage of credentials, biometrics, 
and personal data is a goldmine for attackers — and the bigger the company, 
the juicier the target.

This isn’t even a “hack Google” event so much as an ecosystem failure. The 
breach likely involved credential dumps from dozens of compromised sites that 
people reused passwords on, which then get lumped together into these monster 
datasets. It’s a reminder that *security by scale* isn’t security at all — it’s 
just a bigger mess when it fails.

And yes, biometrics are absolutely not magic. Once your fingerprint or face 
data leaks, you can’t change it like a password. Combine that with how rarely 
people visit a physical branch anymore, and you’ve got a system that’s 
convenient but completely impersonal — and vulnerable the second the digital 
façade cracks.

The moral: use unique passwords, MFA, and assume every large provider is a 
breach waiting to happen. The business model’s not broken because of bad tech 
— it’s broken because convenience keeps winning over caution.

-- 
Tom Mix

Back to alt.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Giant GMail Hack FINALLY Revealed c186282 <c186282@nnada.net> - 2025-10-27 21:02 -0400
  Re: Giant GMail Hack FINALLY Revealed Tom Mix <tommix@dev.null> - 2025-10-28 20:38 +0000
    Re: Giant GMail Hack FINALLY Revealed The World of Izz <jfwalby@gmaill.com> - 2025-10-28 17:25 -0500
      Re: Giant GMail Hack FINALLY Revealed c186282 <c186282@nnada.net> - 2025-10-28 21:41 -0400

csiph-web