3 ms·
Interestingly enough, on the same pastebin site that the leak first appeared, we now have someone programmatically changing the account passwords in the leak: h
by hug 12y ago
Interestingly enough, on the same pastebin site that the leak first appeared, we now have someone programmatically changing the account passwords in the leak: http://pastebin.com/LsKrspK5 http://pastebin.com/LsKrspK5
There's another set of account credentials here: http://pastebin.com/jHEjBLrQ http://pastebin.com/jHEjBLrQ which are all starting with the letter A. It covers AA to AZ, and spans 900 accounts. Does this mean there's only ~24,000 accounts compromised?
Strangely enough, that was the 'sixth' teaser. I found the fifth -- http://pastebin.com/CsN3SrGA http://pastebin.com/CsN3SrGA -- but all of the passwords in that list are "latenightbootycalls". I cannot find the 'fourth' just yet.
(Someone let me know if the link to the paste is frowned upon. It's pretty easy to find on Google, however, so I figure I'm doing no additional damage.)
- mhandley 12y agoLike the other set of credentials, there's a relative scarcity of gmail addresses. I'd expect dropbox accounts to be a pretty good sampling of email addresses. Either these have had gmail addresses removed (unlikely as a few are in there), or the list comes from somewhere where hotmail and yahoo are more popular that gmail - wonder where that would be?
- vidarh 12y ago> or the list comes from somewhere where hotmail and yahoo are more popular that gmail - Unless the numbers have shifted drastically in the last year: One or both of them are ahead of Gmail in most of the world, outside of tech circles.
- hasmatteam 12y agoThe "latenightbootycalls" one is clearly fake. And the one with 900 accounts has a new bitcoin address, and the emails look auto generated.
- swedev 12y agoI got dropbox with an email starting with "al" and my email wasn't included in that list. So they are either not from Dropbox or only a subsection of the account they got hold of.
- dlau1 12y agoIMO service providers should, at the very least, have procedures in place to lock the accounts in the list then email everyone with an unlock link. I just can't fathom there being huge publicly available password lists with credentials that are still valid.