3 ms·
I got an e-mail from LinkedIn today saying that I would be forced to reset my password upon my next login. They didn't say why. I guess this explains it.
by Tharkun 10y ago
I got an e-mail from LinkedIn today saying that I would be forced to reset my password upon my next login. They didn't say why. I guess this explains it.
- FroshKiller 10y agoThe email did say why: "We've recently noticed a potential risk to your LinkedIn account coming from outside LinkedIn. Just to be safe, you'll need to reset your password the next time you log in."
- Tharkun 10y agoYeah, that's vague garbage. What it should have said was: "Our password database was stolen and we fucked when we tried to roll our own password hashing. Your password is likely compromised and you should change it. If you use the password on multiple websites, you should change it everywhere."
- Thrymr 10y agoEven better, they have you click the "Forgot your password" link, as if it was your fault.
- acomjean 10y agoI got an email too this morning too. They invalidated my password. My session was intact, but a password reset was required on next login, and they encourage two factor. I did that despite not really wanting linkedin having my phone number... When you change the password, you can click a box to inactivate all other sessions.