5 ms·
Even if you don't check the source code to verify that it's harmless, you should assume your password has been compromised and have already changed it anyway. T
by joshuahedlund 14y ago
Even if you don't check the source code to verify that it's harmless, you should assume your password has been compromised and have already changed it anyway. This just lowers the cost of checking the list and could help us learn more about the compromise.
- shuri 14y agoIf the hole that let them in hasn't been closed yet, changing the password will make that password vulnerable, right?
- Achshar 14y agoLinkedIn said: > users who have already changed their passwords or created a new account won’t have to worry, as they have recently begun hashing and salting their current password databases. http://techcrunch.com/2012/06/06/linkedin-speaks-some-of-those-compromised-passwords-are-from-linkedin-accounts http://techcrunch.com/2012/06/06/linkedin-speaks-some-of-tho...