|
|
此文章由 idlepoison 原创或转贴，不代表本站立场和观点，版权归 oursteps.com.au 和作者 idlepoison 所有！转贴必须注明作者、出处和本声明，并保持内容完整
本帖最后由 idlepoison 于 2022-9-26 13:06 编辑
如果你和我一样不幸是900万分之一，可以用这个方法查看optus泄露出去的是什么内容。。。
转载自 洗衣机论坛
https://whirlpool.net.au/wiki/optus_sept_2022_breach
首先登陆 optus账号
然后打开以下连接
https://www.optus.com.au/mcssapi ... on/user/information
会出现好几行信息
里面包含名字，邮件，电话 等等
第一行中间有个"contactId":"xxxxxxxx"
删掉下面这个连接红色部分，插入id号码
https://www.optus.com.au/mcssapi/rp-webapp-9-common/customer-management/contact-person/{contactId}?lo=en_US&sc=SS
可以看到地址，驾照，电话等等等等
如果你信息被黑了，那么这些都是黑客拿走的信息
反正我打算去哭一会，我什么信息都对，还挺全
------------------原文----------
What Optus account could have been exposed? Can I find out if I used my drivers license or passport?
You can check the Optus customer API yourself after logging in at https://www.optus.com.au first.
You can only access data for the logged in user, and can't view the data of other customers.
This is not the presumed link the hacker used to collect customer data, which allegedly did not require any authentication.
View Account details (including any identification details, like drivers license or passport):
https://www.optus.com.au/mcssapi ... on/user/information
View Customer Address details (including any identification details, like drivers license or passport):
https://www.optus.com.au/mcssapi ... ent/contact-person/{contactId}?lo=en_US&sc=SS
In the second URL you will need to replace {contactId} with with that found in the first link (number only, without the curly brackets).
Q: How do I convert the long random numbers in the date fields – date of birth, expiry dates – to a normal date?
A: They are epoch timestamps. Paste the number in https://www.epochconverter.com/ which will convert it to a normal date. |
评分
-
查看全部评分
|
读书一小时 － 2011读书笔记 (2011-6-8) 老猫晒太阳 
我爱我们的花园--见证了某人一点一滴的努力 （紫藤盛开时） (2007-3-27) anitalx 
发表于 2022-9-25 20:49
