5 ms·
xkcd: 562k Accounts breached according to haveibeenpwned
- cristoperb 7y agoI'm one of them :/ The haveibeenpwned description says password hashes are md5, which sucks. But phpBB has used bcrypt by default since version 3.1 (2014)... I wonder if all the hashes are md5 or only those for older accounts? https://haveibeenpwned.com/PwnedWebsites#XKCD https://haveibeenpwned.com/PwnedWebsites#XKCD
- lucb1e 7y agoImpacted as well, but I'm happy to be part of it. Either they'll crack an old password or, more likely, this is a new style password and they waste a lot of cracking time on it. Using a password manager for everything except a few offline things and my bank account was definitely the right move.
- jsjohnst 7y agoWhat do you use for your bank account?
- lucb1e 7y agoSame as for my master password: a randomly generated, memorized password. The trick to remembering them is to use them regularly. This is also why I don't use a passphrase: a password is much shorter and less frequently typo'd, thus less annoying for frequent use.
- jarfil 7y agophpBB... I wonder how many of those accounts are just fake spam bot accounts.
- jasoneckert 7y agoThis sucks. But on the bright side, we can expect an XKCD comic about it in the future.
- NextHendrix 7y agoI wonder how many of those passwords are correcthorsebatterystaple
- JoeAltmaier 7y agoWho has an 'account' with xkcd? Confused.
- lambada 7y agoThey have forums where you can discuss the comics and other things. https://forums.xkcd.com/ https://forums.xkcd.com/
- el_cujo 7y agoLooks like there is a forum for the site, which is now down due to the breach. I had no idea it existed, let alone had half a million accounts.
- deleted 7y ago[deleted]
- bhaak 7y agoMe, too. I mean, a xkcd forum is not that surprising but half a million users while I never heard about it existing? Could that have been a honeypot? At least partly? That's something xkcd would do.
- Tuna-Fish 7y agoNo, it's real. It used to be prominently on the site sidebar, but it got very big around the time xkcd first got popular, and the link was subsequently removed. After that, you had to know it existed and just go directly to forums.xkcd.com, so the only people who knew of it were generally the people who were early xkcd readers or people invited by them. Imho it's one of the better open "offtopic" discussion forums on the web, partly because of insular culture trending towards thoughtfulness.
- jimhefferon 7y agoI ran into it by Googling, so it was not hidden well.
- kchoudhu 7y ago