BreachExchange mailing list archives

Re: Details on AOL search log disclosure


From: Dennis Opacki <DOpacki () Covestic com>
Date: Mon, 7 Aug 2006 14:37:50 -0700

Interesting. At least there seems to be a potential to mine these data for some useful threat metrics.

-Dennis Opacki





From: lyger
Sent: Mon 8/7/2006 2:26 PM
To: dataloss () attrition org
Subject: [Dataloss] Details on AOL search log disclosure


(from Dave Farber's IP list)

Begin forwarded message:

Date: August 7, 2006 1:12:38 PM EDT
Subject: Re: [IP] AOL Releases Search Logs from 500,000 Users


A search for an SSN shaped regex on the full AOL search data returns a 191 
results including repeat searches.  Many of these have full names, and at least 
a dozen include either an addresses, drivers license number, date of birth or 
some combination of the three in the same query.  There's no telling how much 
more information an aggregation of other queries by those same user ID would 
yield.
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/errata/dataloss/


Current thread: