linked-out?

Millions of LinkedIn passwords reportedly leaked online | Security & Privacy - CNET News

i think its time to change some passwords

edit: confirmed

http://news.cnet.com/8301-1009_3-57448465-83/linkedin-confirms-passwords-were-compromised/?ttag=fbw

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

Iristheangel

Thanks for the heads up. Done

Carl_S_901

Just changed mine

blargoe

Thanks.

nicklauscombs

sometimes i wonder if the money spent for my password vault software is worth it. this is one of those times i'm glad every site i use has a different random password.

onesaint

Came across this leak in my email this morning and was going to post it, but had to change my password first.:)

joshmadakor

Done. +1

TLeTourneau

Done, thanks!

the_hutch

It was only the hashes that were leaked. Given the complexity of my password, I should have approximately 16 years until someone breaks in. Still, I changed mine in the off chance that the person who acquired them is some uber nerd in a basement with a super-computer and some seriously hardcore rainbow tables. Thank you LinkedIn for not storing passwords in plaintext.

Xcluziv

Thanks man!!!!

mattlee09

LastPass is providing a tool to confirm if your information was possibly compromised as well.

https://lastpass.com/linkedin/

XiaoTech

lol @ lastpast link. If you enter "changeme" or other obvious passwords, you've always been in danger of being hacked.

Any case, I changed mine. I just started changing passwords to my e-mail and other social media accounts this weekend. Gave me a good excuse to update it.

N2IT

Updated and changed as well

Forsaken_GA

nicklauscombs wrote: »

sometimes i wonder if the money spent for my password vault software is worth it. this is one of those times i'm glad every site i use has a different random password.

Why spend money? I use KeePass, as it's available on virtually every single platform. And I put my password file in DropBox, since all my devices have access to it as well. Makes getting access to my passwords incredibly easy.

But yeah, like you, I don't actually know the majority of my passwords. New login? randomnly generate password in Keepass, copy to clipboard, paste, done.

BigMevy

Yeah, I saw that on CNN this morning. I logged into my account and it prompted me to do a password change.

onesaint

@Forsaken: Is there just a single database kept on DropBox which all the versions of KeePass can access? Also are you using the key file (and if so, how) or just password protecting the db?

NetworkingStudent

Looks like Linked in was hacked. Maybe it's time to change passwords.

LinkedIn Was Breached. Now What Do You Do? - NYTimes.com

opps I guess someone already posted this, sorry. Thanks for posting!

rogue2shadow

Complete!

RobertKaucher

This is interesting. The leaked hashes were posted and someone put this together. Change your password and then check your old one: LeakedIn: Is your password safe?

Sett

Last.fm followed:

Last.fm Hacked. Change Your Password Now ! - hypebot

Really annoying. I am not using KeePass, but looks like that's the way to go.

tpatt100

Don't hack Pandora or you might find out how bad my taste in music is.

hiddenknight821

RobertKaucher wrote: »

This is interesting. The leaked hashes were posted and someone put this together. Change your password and then check your old one: LeakedIn: Is your password safe?

Funniest post I ever read today! Lol, no way I'm gonna verify this.

Forsaken_GA

onesaint wrote: »

@Forsaken: Is there just a single database kept on DropBox which all the versions of KeePass can access? Also are you using the key file (and if so, how) or just password protecting the db?

just a single database file protected by a very long passphrase. Every version of KeePass I've used (which is OS X, Linux, Windows, and iOS) opens the database file with no problems. I have faith in the encryption used, so I don't mind putting the file in 'the cloud', and since it resides on my dropbox folder in all instances, changes are automatically updated across all of my devices. Simple, easy, and free password management.

Incidentally, here is the time it would take to crack my databases passphrase:

Online Attack Scenario:
(Assuming one thousand guesses per second) 4.11 hundred thousand trillion centuries
Offline Fast Attack Scenario:
(Assuming one hundred billion guesses per second) 4.11 billion centuries
Massive Cracking Array Scenario:
(Assuming one hundred trillion guesses per second) 4.11 million centuries

At least, according to this:

https://www.grc.com/haystack.htm

I also subscribe to the xkcd philosophy of passwords:

http://xkcd.com/936/

SteveLord

Never used it or felt a use for LinkedIn, but changed my password anyway.

onesaint

And with that comes the end of MD5crypt (broken since 2005!).

Md5crypt Password scrambler is no longer considered safe by author — PHKs Bikeshed

DevilWAH

Forsaken_GA wrote: »

Why spend money? I use KeePass, as it's available on virtually every single platform. And I put my password file in DropBox, since all my devices have access to it as well. Makes getting access to my passwords incredibly easy.

But yeah, like you, I don't actually know the majority of my passwords. New login? randomnly generate password in Keepass, copy to clipboard, paste, done.

I foud out recently with keypass that you can have a local copy of the database and one remote (dropbox) and keep them synced. This could be good if you are ever in the postition at work that you loss internet or site links.
I have one data base file online and one on my local PC at work that sync when I cloose keepass. really is a great little program.

amcnow

My place of employment sent out communication regarding this. I promptly changed my password. Still, thanks for posting this.

Forsaken_GA

DevilWAH wrote: »

I foud out recently with keypass that you can have a local copy of the database and one remote (dropbox) and keep them synced. This could be good if you are ever in the postition at work that you loss internet or site links.
I have one data base file online and one on my local PC at work that sync when I cloose keepass. really is a great little program.

I don't really see the need for that... if you actually install the DropBox local client, the folder is local, it just syncs with DropBox's servers, you don't need to be online to access the contents in the DropBox folder, you just need to be online to send and receive updates.