<HTML><HEAD></HEAD>
<BODY>
<DIV id=idOWAReplyText15225 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Interesting. At least there seems to be a potential to mine these data for some useful threat metrics.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>-Dennis Opacki</FONT></DIV><FONT face=Arial size=2></FONT></DIV>
<DIV dir=ltr>
<DIV dir=ltr><BR></DIV>
<DIV dir=ltr>
<HR tabIndex=-1>
</DIV>
<DIV dir=ltr><FONT face=Tahoma size=2><B>From:</B> lyger<BR><B>Sent:</B> Mon 8/7/2006 2:26 PM<BR><B>To:</B> dataloss@attrition.org<BR><B>Subject:</B> [Dataloss] Details on AOL search log disclosure<BR></FONT><BR></DIV></DIV>
<DIV><PRE style="WORD-WRAP: break-word">(from Dave Farber's IP list)
Begin forwarded message:
Date: August 7, 2006 1:12:38 PM EDT
Subject: Re: [IP] AOL Releases Search Logs from 500,000 Users
A search for an SSN shaped regex on the full AOL search data returns a 191
results including repeat searches. Many of these have full names, and at least
a dozen include either an addresses, drivers license number, date of birth or
some combination of the three in the same query. There's no telling how much
more information an aggregation of other queries by those same user ID would
yield.
_______________________________________________
Dataloss Mailing List (dataloss@attrition.org)
http://attrition.org/errata/dataloss/
</PRE></DIV></BODY></HTML>