Hacker News Reader

It seems to be a simple case of users re-using passwords for all their services, which explains how someone can log into their teamviewer account, connect to their computer and then proceed to make purchases on amazon, etc.

This is most likely related to the LinkedIN hack from 2012, but someone is now selling that data of 117 million people with decrypted passwords.

View on HN

Except, like in every thread in the past week, people are reporting unique random entropy passwords being compromised. If one thing is clear it is that this is a lot more complex than reusing Linkedin passwords.

It's also pretty easy to look at their downtime last week as a huge red flag.

The purchases seem to be made using things like browser-stored passwords/login cookies, or if nothing else the password reset and access to an email client with stored login info.

I don't think shared passwords are being reused once inside the session, mostly because why would you need to hijack someone's box to do so? Just log into Amazon from wherever.

They might be used to get into the remote session in some cases, but a lot of people who otherwise seem educated on the issue seem pretty convinced that can't be what happened to them.

>Just log into Amazon from wherever

Good luck with that! Their anti-fraud systems will fuck you 99% of the time.

Reply on news.ycombinator.com