[新闻] 两亿中国用户 cv 被暴露

[fangchang]

https://www.zdnet.com/article/cvs-containing-sensitive-info-of-over-202-million-chinese-users-left-exposed-online/?mid=1

好奇都是哪里爬出来的。

我知道有不少机构想尽办法搜集 cv，不过这种利益转换是怎么来的？

[dreampuf]

> Diachenko told ZDNet that one of the primary sources from where the app appears to have scraped CVs is bj.58.com, a popular Chinese job portal, however other portals could have been scraped as well.

> One of the researcher's followers came to the rescue last year, when he pointed Diachenko to a now-deleted GitHub repository that contained the source code of a web app.
仓库已经被删了 https://github.com/xzfan/data-import

[trait]

这都一个多星期以前的事了，来自火星的记者