5 ms·

Somebody should compare these against previous major breaches (Adobe etc.). If there was a new one you would think that they would directly name the service. Ot

Somebody should compare these against previous major breaches (Adobe etc.). If there was a new one you would think that they would directly name the service. Otherwise they might just be seeking attention / BTC by reposting a previous breach.

luisrudge 12y ago
easy: https://haveibeenpwned.com/ https://haveibeenpwned.com/
- TTPrograms 12y ago
  Looks like no, then. Appears to be a new breach of some other service.
- sillysaurus3 12y ago
  The website says my gmail address has been pwned: "In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old. Compromised data: Email addresses, Passwords" Is there some way to figure out exactly which password was compromised?
  - surge 12y ago
    Grab the torrent of the list w/ passwords. I will say that the passwords are usually very old, grabbed from some forums, and have probably been out in the wild for a while. So basically, as long as you don't use the same password everywhere for years, you're probably fine.
  - techrat 12y ago
    https://isleaked.com/en.php https://isleaked.com/en.php Type in your email address, you'll get the first two letters of the known password back. It should help to track down which service the password came from. When the 5 Mil Gmail leak first happened, it was found to be a collection of gmail/pass combinations from other leaks and not a Gmail hack. Known sources (and definitely not limited to these sites): * Gawker (and related sites), * Friendster, * XTube, * FileDropper, * Daz3d/Bryce, * eHarmony, * Savage, * Bioware, * FreebieJeebies, * PoliceAuctions, * Bravenet, * Filesavr. If you recycled passwords, change them even if they're not in the email list. Turn on two factor for Google Accounts.
    - username3 12y ago
      A friend's email was on isleaked, but said they never had a password with those first two letters.
aioprisan 12y ago
I used a password manager and any decent one will look for your email address and password and hashes published in the wild, to keep you safe. (i.e. https://watchtower.agilebits.com/ https://watchtower.agilebits.com/)

luisrudge 12y ago

easy: https://haveibeenpwned.com/ https://haveibeenpwned.com/

TTPrograms 12y ago
Looks like no, then. Appears to be a new breach of some other service.
sillysaurus3 12y ago
The website says my gmail address has been pwned: "In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old. Compromised data: Email addresses, Passwords" Is there some way to figure out exactly which password was compromised?
- surge 12y ago
  Grab the torrent of the list w/ passwords. I will say that the passwords are usually very old, grabbed from some forums, and have probably been out in the wild for a while. So basically, as long as you don't use the same password everywhere for years, you're probably fine.
- techrat 12y ago
  https://isleaked.com/en.php https://isleaked.com/en.php Type in your email address, you'll get the first two letters of the known password back. It should help to track down which service the password came from. When the 5 Mil Gmail leak first happened, it was found to be a collection of gmail/pass combinations from other leaks and not a Gmail hack. Known sources (and definitely not limited to these sites): * Gawker (and related sites), * Friendster, * XTube, * FileDropper, * Daz3d/Bryce, * eHarmony, * Savage, * Bioware, * FreebieJeebies, * PoliceAuctions, * Bravenet, * Filesavr. If you recycled passwords, change them even if they're not in the email list. Turn on two factor for Google Accounts.
  - username3 12y ago
    A friend's email was on isleaked, but said they never had a password with those first two letters.

aioprisan 12y ago

I used a password manager and any decent one will look for your email address and password and hashes published in the wild, to keep you safe. (i.e. https://watchtower.agilebits.com/ https://watchtower.agilebits.com/)