Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This blog post does not identify exactly where the leaked data is.

I have an DYI export of my account from 3/26/13 and am trying to determine where the data is. Can anyone help?

DYI's have the following directory structure:

last name

- html

- videos

- photos

- photo

index.html

The html folder contains many files including "friends.html," where each friend is listed as a div. I believe normal data, i.e. friends who did not upload address book have the structure:

<div class="friendvcard"><span class="profile fn">[Friend's Full Name]</span></div>

Whereas users who have had their data inadvertently leaked due to Friends who uploaded address books containing their contact data (confusing but I think that's right) have the following structure which contains leaked data:

<div class="friend vcard"><span class="profile fn">[Friend's Full Name]</span><span class="email"> (<a href="mailto:[Friend's email address]">[Friend's email address]</a>)</span></div>

I have three of these entries with email addresses, but am not seeing any phone numbers. Can anyone else corroborate this structure, add how the phone numbers were stored, and verify an example case where a known friend uploaded their contact data matching the leak?

edited for clarity



It was 'addressbook.html ' from your extended data download, not the normal data download.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: