5 ms·
Me too, and I've never attached an app to twitter. (I've got an account that I basically have signed into 3 or 4 times in 5 years). I'm curious why my username
by wiredfool 14y ago
Me too, and I've never attached an app to twitter. (I've got an account that I basically have signed into 3 or 4 times in 5 years). I'm curious why my username came up as being compromised, unless they're doing something sneaky about updating all passwords older than x yrs old.
edit: The attacker got salted password hashes. That explains it.
- 0x0 14y agoMaybe they stopped the hackers in the middle of dumping the database and they only got away with the earliest accounts created.
- wiredfool 14y agoIirc, my usernumber is ~ 700k. So, probably an early version of the hash, unless they silently upgrade on logins.
- wallywax 14y agoCould be. My account dates from 2006, and my userid is sub 50k.
- kape 14y agoGot also the message. My account was created in January 2007 and user id is about 700k. So this could be the case.
- irq 14y agoI just got the reset email, and my uid is in the 3.8 million range, created 4/2007.
- taligent 14y agoOr more likely the database is sharded and they just compromised those physical machines.
- 0x0 14y agoThat sounds odd, 250k out of 500m sounds like way too little data for even a single shard, no? And why would only a single shard be vulnerable?