Cable Forum - [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Cable Forum (https://www.cableforum.uk/board/index.php)

- Internet Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=25)

- - [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online (https://www.cableforum.uk/board/showthread.php?t=33656282)

SnoopZ

05-10-2009 13:59

[Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Change your password if you think you may be affected!

Quote:

Neowin has received information regarding a possible Windows Live Hotmail "hack" where password details of thousands of Hotmail accounts have been posted online.

http://www.neowin.net/news/main/09/1...-leaked-online

Aragorn

05-10-2009 14:12

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

As one of the comments points out, MS would not be stoopid enough (I hope) to store clear text passwords.
If someone has the hashed passwords and has decrypted some of them that would be pretty bad news.

zing_deleted

05-10-2009 14:16

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Ta for infor password changed :)

webcrawler2050

05-10-2009 14:20

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by SnoopZ (Post 34884184)

Change your password if you think you may be affected!

http://www.neowin.net/news/main/09/1...-leaked-online

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

zing_deleted

05-10-2009 14:23

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by webcrawler2050 (Post 34884204)

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

however they store it I still changed it lol

I do not even create my own passwords. The only one I type into my machine is a master password that matches no other and I use a password manager to create them for me

Druchii

05-10-2009 14:23

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by webcrawler2050 (Post 34884204)

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

MD5 is no longer secure.

webcrawler2050

05-10-2009 14:42

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by Druchii (Post 34884207)

MD5 is no longer secure.

MD5 with other varients, depending on database and scripting language

Druchii

05-10-2009 16:00

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Password + Salt + MD5 is much better :)

SnoopZ

05-10-2009 18:44

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

BBC News have reported on it now.

http://news.bbc.co.uk/1/hi/technology/8291268.stm

Paul	05-10-2009 18:53

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Sounds like they were collected using a phishing scheme, so if you only use it to access hotmail you should be ok.

---------- Post added at 17:53 ---------- Previous post was at 17:52 ----------

It also mentions somewhere that they were only accounts beginning with A or B

zing_deleted

05-10-2009 19:02

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

if A and B was posted would it not be prudent to think maybe there are more they have not posted yet? air on the side of caution after all its hardly a ball ache to change a password by rights you should do regularly anyway

Turkey Machine

05-10-2009 19:12

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Considering I got a "please re-activate your Hotmail account" phishing email and promptly deleted it, clearly there are some stupid people out there.

MadGamer

05-10-2009 19:33

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

I changed my password and secret question just to be safe

Russ	06-10-2009 12:22

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

http://news.bbc.co.uk/1/hi/technology/8292299.stm

It's other webmail accounts too.

Kymmy

06-10-2009 12:48

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

And people wonder why I only tend to use my own mail servers with my own domains :rolleyes:

Druchii

06-10-2009 14:34

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Am i classed as paranoid? My passwords are upwards of 17chars each...

LSainsbury

06-10-2009 21:44

Gmail / Hotmail / Yahoo Security

Not sure if this is already being discussed - could not find a thread for it so:

Quote:

Google's web-based e-mail system, Gmail, has been targeted as part of an "industry-wide phishing scheme".
The firm said that it had immediately safeguarded the affected accounts.
BBC News has seen two lists that detail more than 30,000 names and passwords from e-mail providers, including Yahoo and AOL, that were posted online.
The lists also include details of thousands of Microsoft Hotmail users. Google said fewer than 500 of its accounts had been affected by the scam.

http://news.bbc.co.uk/1/hi/technology/8292928.stm

Stuart

06-10-2009 22:26

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Ok, I've merged the two threads on this subject, and updated the title a bit.

bopdude

06-10-2009 22:32

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by Paul M (Post 34884330)

Excellent, I have two gmail email addys, one begins with A and the other, yep B :rolleyes: or well, lets log on and see :D

Halcyon

06-10-2009 22:44

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Am I right in saying that these passwords only got out if you entered your details on dodgy sites that stole your details trying to pass as the original sites?

nffc	07-10-2009 00:55

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by Halcyon (Post 34885115)

Am I right in saying that these passwords only got out if you entered your details on dodgy sites that stole your details trying to pass as the original sites?

Probably...

richard b pickle

08-10-2009 14:26

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by Halcyon (Post 34885115)

Am I right in saying that these passwords only got out if you entered your details on dodgy sites that stole your details trying to pass as the original sites?

Yes. The fact that some were published somewhere is irrelevant.

Hugh	08-10-2009 14:28

Re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

Quote:

Originally Posted by Halcyon (Post 34885115)

Am I right in saying that these passwords only got out if you entered your details on dodgy sites that stole your details trying to pass as the original sites?

Some of them were phished.

All times are GMT +1. The time now is 17:36.