<story><title>Update on Coinbase Data Security</title><url>http://blog.coinbase.com/post/81407694500/update-on-coinbase-data-security</url></story><parent_chain></parent_chain><comment><author>downandout</author><text>While not ideal, I think this is being blown out of proportion by someone that doesn&amp;#x27;t like Coinbase.  For starters, of the 2042 &amp;quot;leaked&amp;quot; emails, 1153 are unique.  That means the person that posted it was trying to pad their results, which combined with the possible but unfounded FBI&amp;#x2F;Fincen accusations, illustrates that someone is mad at Coinbase and is lashing out.&lt;p&gt;Enumeration isn&amp;#x27;t a fantastic idea, but given its ubiquity in various forms on major sites throughout the internet, I don&amp;#x27;t think it&amp;#x27;s worthy of all of this negative attention directed specifically at Coinbase either.  I once wrote a program that could take a list of random emails and use Facebook to turn it into a CSV matching each email to a name, a list of their friends, their location, and interests.  That should have been scandalous, but it wasn&amp;#x27;t.&lt;p&gt;We are acting as pawns in someone&amp;#x27;s revenge scheme against Coinbase.</text></comment>
<story><title>Update on Coinbase Data Security</title><url>http://blog.coinbase.com/post/81407694500/update-on-coinbase-data-security</url></story><parent_chain></parent_chain><comment><author>yid</author><text>I&amp;#x27;m curious why, given the prior reports of security issues at Coinbase and the ongoing drama with Mt Gox, you guys didn&amp;#x27;t &lt;i&gt;immediately&lt;/i&gt; hire, say, tptacek&amp;#x27;s company to do extensive penetration testing and a full security audit. It appears that not all API calls were rate-limited, as they probably should have been, and there certainly doesn&amp;#x27;t seem to be any sort of monitoring of brute-force attempts like this in place. With all the negative publicity around Bitcoin exchanges, you should have doubled down on security weeks ago, or at least explained the privacy tradeoffs in your design decisions clearly.</text></comment>