Latest round of password leaks

Forums › Off topic › Latest round of password leaks

gzt

18678 posts

Uber Geek
+1 received by user: 7809

Lifetime subscriber

#151979 11-Sep-2014 22:54

Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:

https://bigjocker.com/qd/google5M.jsp
https://isleaked.com/en

Signature goes here.

Ragnor

8279 posts

Uber Geek
+1 received by user: 585

Trusted

#1127199 12-Sep-2014 13:39

This site is also great for checking if you're in any of the leaked data
https://haveibeenpwned.com/

sir1963

3428 posts

Uber Geek
+1 received by user: 3756

Subscriber

#1127372 12-Sep-2014 18:00

Just been getting lot of emails from mywot.com (an excellent site) telling me that someone in Russia is sending Password reset requests to them for my account.

Just changed that password and some others to random ones generated Apples password generator.

Sideface

9649 posts

Uber Geek
+1 received by user: 15596

Trusted

Lifetime subscriber

#1127429 12-Sep-2014 19:11

gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

Sideface

matisyahu

1639 posts

Uber Geek
+1 received by user: 355

Trusted

#1127439 12-Sep-2014 19:45

Sideface:
gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

I know this sounds dumb but you did replace asdf with your own email address?

"When the people are being beaten with a stick, they are not much happier if it is called 'the People's Stick'"

Sideface

9649 posts

Uber Geek
+1 received by user: 15596

Trusted

Lifetime subscriber

#1127448 12-Sep-2014 20:16

kawaii: I know this sounds dumb but you did replace asdf with your own email address?

No - I went to the Hotmail site and changed the password for my existing Hotmaiil account.

Sideface

gzt

18678 posts

Uber Geek
+1 received by user: 7809

Lifetime subscriber

#1127571 12-Sep-2014 21:58

kawaii:
Sideface:
gzt: Several million username/password pairs were dumped to the net. General opinion says they are around 2 years old. It is not known what service they were obtained from. There are free services to check if your address is in the dump:
https://bigjocker.com/qd/google5M.jsp?name=asdf
https://isleaked.com/en

I visited bigjocker.com and got this message:

"Woops, sadly your address was found in the leaked database. Change your google password immediately. You should also change all the passwords for all your accounts, even if they were no associated with this gmail account."

One little problem - I have never had a gmail account.
I changed my Google password anyway.

I know this sounds dumb but you did replace asdf with your own email address?

Mods, if it is useful to edit that asdf out of the url go right ahead.

Btw, Isleaked allows wildcards. Useful for checking your domain.

Dell

Shop now for Dell laptops and other devices (affiliate link).

SpookyAwol

638 posts

Ultimate Geek
+1 received by user: 54

#1127647 13-Sep-2014 08:54

Im wondering if some of those sites are now happily harvesting valid email addresses.
I tried one of them with an obselete email and got the same message, but it also tried to give the first 2 letters of my password as proof.
The first 2 letters provided have never been used as a password. Dodgy?

linw

2893 posts

Uber Geek
+1 received by user: 1205

#1127658 13-Sep-2014 09:28

SpookyAwol: Im wondering if some of those sites are now happily harvesting valid email addresses.
I tried one of them with an obselete email and got the same message, but it also tried to give the first 2 letters of my password as proof.
The first 2 letters provided have never been used as a password. Dodgy?

Must admit I wondered about that as well. Great way of doing it.