Latest round of password leaks

Forums › Off topic › Latest round of password leaks

gzt

15223 posts

Uber Geek

Lifetime subscriber

#151979 11-Sep-2014 22:54

Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:

https://bigjocker.com/qd/google5M.jsp
https://isleaked.com/en

Signature goes here.

Ragnor

8085 posts

Uber Geek

Trusted

#1127199 12-Sep-2014 13:39

This site is also great for checking if you're in any of the leaked data
https://haveibeenpwned.com/

Mighty Ape

Shop Mighty Ape for electronics, games, computers books and more (affiliate link).

sir1963

2276 posts

Uber Geek

#1127372 12-Sep-2014 18:00

Just been getting lot of emails from mywot.com (an excellent site) telling me that someone in Russia is sending Password reset requests to them for my account.

Just changed that password and some others to random ones generated Apples password generator.

Sideface

8457 posts

Uber Geek

Trusted

Lifetime subscriber

#1127429 12-Sep-2014 19:11

gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

Sideface

matisyahu

1585 posts

Uber Geek

Trusted

#1127439 12-Sep-2014 19:45

Sideface:
gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

I know this sounds dumb but you did replace asdf with your own email address?

"When the people are being beaten with a stick, they are not much happier if it is called 'the People's Stick'"

Laptop: MacBook Air (Apple M2, 24GB RAM, 512GB SSD)

Desktop: Apple Studio, Studio Display (Apple M1 Max, 32GB RAM, 512GB SSD)

Phone: Nothing Phone (12GB RAM, 256GB Storage, Nothing OS 2.0.2), Google Workspace

Other: UniFi AP AC HD, UniFi Dream Machine, Apple TV 4K 128GB, Firefox

Sideface

8457 posts

Uber Geek

Trusted

Lifetime subscriber

#1127448 12-Sep-2014 20:16

kawaii: I know this sounds dumb but you did replace asdf with your own email address?

No - I went to the Hotmail site and changed the password for my existing Hotmaiil account.

Sideface

gzt

15223 posts

Uber Geek

Lifetime subscriber

#1127571 12-Sep-2014 21:58

kawaii:
Sideface:
gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

I know this sounds dumb but you did replace asdf with your own email address?

Mods, if it is useful to edit that asdf out of the url go right ahead.

Btw, Isleaked allows wildcards. Useful for checking your domain.

SpookyAwol

596 posts

Ultimate Geek

#1127647 13-Sep-2014 08:54

Im wondering if some of those sites are now happily harvesting valid email addresses.
I tried one of them with an obselete email and got the same message, but it also tried to give the first 2 letters of my password as proof.
The first 2 letters provided have never been used as a password. Dodgy?

linw

2692 posts

Uber Geek

Subscriber

#1127658 13-Sep-2014 09:28

SpookyAwol: Im wondering if some of those sites are now happily harvesting valid email addresses.
I tried one of them with an obselete email and got the same message, but it also tried to give the first 2 letters of my password as proof.
The first 2 letters provided have never been used as a password. Dodgy?

Must admit I wondered about that as well. Great way of doing it.