I have multiple Yahoo email accounts that I still use. Some go back a decade. Some to 2012. Some to late 2015.
Some were created as accounts for a future but not implemented purpose so are essentially dormant (others were used for mail exchange with a single big business customer) and only active via syncing of my imap/smtp mail clients.
Since day one of iCloud Keychain I enabled it and used it to create the 15 character default password it suggests for all sites I use including Yahoo.
From day one, that Yahoo (and any other site that allows it) made it available, I enabled 2FA in my Yahoo accounts.
Also I pulled Java & Flash from my Macs (and additionally Silverlight from my dirty PC.)
I live overseas and sometimes login to the Yahoo control panel via a vpn. Other than that my only contact to Yahoo is via my MacOS and iOS email clients.
So the access and usage is fairly consistent across all accounts.
I get spam in the 2010 era accounts that have only been used for those single big business customers. (Until the Breach was announced I wondered how spammers had found both of these unusually named accounts.)
As far as Yahoo contacting me they previously contacted me for all accounts created prior to 2015 (I subsequently reset all my Yahoo p/w just to be safe.).
Yahoo's latest communication was only sent to one single 2009 era account (the secondary one that I use daily for non critical things) but not to the other accounts previously flagged.
Given the similar usage of all the accounts, I would have thought more accounts might have received this latest notification. I don't yet see the pattern if it's there (but am suspecting my dirty PC as opposed to my Apple menagerie.)
I'm disappointed that Yahoo couldn't be bothered to inform customers which device and date and location, etc gave rise to the cookie concern, so that a customer could Review, scan, reinstall or discard that device.
Yahoo! Did a disservice to their customers by not keeping up to date with best practices, being slow to alert (obviously to avoid bad PR and share price declines and bonus hits) and then not giving them any actionable data or advice.
[doublepost=1487250745][/doublepost]
Is this for
real?
As a Yahoo Mail user, I have received no such security warning.
Perhaps the warning was sent only to those users who had not enhanced the security of their accounts as was requested several YEARS ago.
Please see my other note.