<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Sep 11, 2015 at 2:06 PM, John Kelsey <span dir="ltr"><<a href="mailto:crypto.jmk@gmail.com" target="_blank">crypto.jmk@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">I wonder how that ratio (90%+ of the women there were fake) compares with other dating sites.  My uninformed guess is that it's probably comparable to other sites.</blockquote><div><br></div><div>three in 10,000 were real if these guys are correct:<br>   <a href="http://www.independent.co.uk/life-style/gadgets-and-tech/news/ashley-madison-hack-just-three-in-every-10000-female-accounts-on-infidelity-website-are-real-10475310.html" target="_blank">http://www.independent.co.uk/life-style/gadgets-and-tech/news/ashley-madison-hack-just-three-in-every-10000-female-accounts-on-infidelity-website-are-real-10475310.html</a><br><br>Knowing the real from the invented accounts is interesting in the context of a class</div><div>action.   Converting abandoned accounts to live accounts by recovering a pass word</div><div>and updating the profile to have a valid enough contact could collect free cans of tuna.</div><div> <a href="http://www.metzdowd.com/mailman/listinfo/cryptography" rel="noreferrer" target="_blank"></a><br></div><div>Apparently insiders made many invented accounts early on, I doubt the password generator used was very inventive.</div><div>That might  further assist the cracking and sorting the real from the invented.</div><div><br></div><div><a href="http://www.independent.co.uk/news/ashley-madison-hack-former-employee-claims-she-made-hundreds-of-fake-alluring-female-profiles-as-millionpound-lawsuits-launched-10466900.html">http://www.independent.co.uk/news/ashley-madison-hack-former-employee-claims-she-made-hundreds-of-fake-alluring-female-profiles-as-millionpound-lawsuits-launched-10466900.html</a><br></div><div><br></div><div>WP has been updated</div><div> <a href="https://en.wikipedia.org/wiki/Ashley_Madison">https://en.wikipedia.org/wiki/Ashley_Madison</a></div></div><br>This attack on accounts and cracking what might have a worthy security model is a lesson</div><div class="gmail_extra">for the text books.<br clear="all"><div><br></div>-- <br><div><div dir="ltr">  T o m    M i t c h e l l</div></div>
</div></div>