Biggest exploit ever in Yahoo!

This guy named mark made a program in late october that would steal the cookie to any yahoo name. And after a lil bit of time he or someone else figured out how to get an id into account info with just a cookie. The program to steal cookies got patched cause yahoo found out about it and fixed the problem, but b4 they patched it the guy stole 10’s of 1000’s of cookies, an he sold the program to some other people that stole 1000’s too. No need to be alarmed, the only ids they mainly stole the cookies to was ones that had symbols in them, or original ids, an original is basically a word u can look up in the dictionary. It is kind of ironic cause 90% of the ids that were taken with this exploit was stolen in the first place by some cracker.
Here’s an example of what a cookie for a yahoo name looks like:

Y=v=1&n=2qm5oej7u03hm&l=___2_0_d_3_o___/o&p=f2d09u9a02000g00&r=2p&lg=us&intl=us;T= z=.eho/A.k2o/AcRuwQY1kqAR&a=QAE&sk=DAAioGHrl53l4s&d=YQFRQUUBdGlwAXNpcWFYQwF6egEuZWhvL0FnV0E-;

from it you can decode the default id, the alternate email if the cookie is still valid, if it’s not valid u can still decode the birth year, and the zip code/country. Basically the only info you have to work for is the actual birth date on the id. Luckily yahoo did one smart thing this past year, they don’t show the birth day to an id in any shape or form on their website. Used to if you put a security key on an account thru pay direct it would show you the birthdate their, and let you change it if u wanted to, lmao like your age ever changes? They stopped doing that cause there was an exploit in 2001 that people used pay direct to steal 1000’s of names with.
This is just the basics of the exploit, i’m not gonna go into any details about how to actually get the birthday on an account, I will say that someone figured out a nice trick how to get an id into account info with only the cookie, an u can change the alt email, and the zip code, all u have to do is figure out how to get the birthday on the account to email your self a new password.

Let me reiterate, that in no way shape or form will this affect anyone heres accounts, unless you can look your account up in the dictionary, an i don’t mean like name2432 i mean like if your id is name, or some single word. As far as i know right now it’s not possible for anyone to steal cookies. But to secure your id all you have to do is reset your cookie, you do that by changing your password. I myself have lost a handful of names to this exploit, but i have taken 10 fold what i lost. I don’t think there will ever be an exploit this big again.