[Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Change your password if you think you may be affected!

http://www.neowin.net/news/main/09/1...-leaked-online

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

As one of the comments points out, MS would not be stoopid enough (I hope) to store clear text passwords.
If someone has the hashed passwords and has decrypted some of them that would be pretty bad news.

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Ta for infor password changed :)

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

however they store it I still changed it lol

I do not even create my own passwords. The only one I type into my machine is a master password that matches no other and I use a password manager to create them for me

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

MD5 is no longer secure.

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

MD5 with other varients, depending on database and scripting language

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Password + Salt + MD5 is much better :)

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

BBC News have reported on it now.

http://news.bbc.co.uk/1/hi/technology/8291268.stm

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Sounds like they were collected using a phishing scheme, so if you only use it to access hotmail you should be ok.

---------- Post added at 17:53 ---------- Previous post was at 17:52 ----------

It also mentions somewhere that they were only accounts beginning with A or B

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

if A and B was posted would it not be prudent to think maybe there are more they have not posted yet? air on the side of caution after all its hardly a ball ache to change a password by rights you should do regularly anyway

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

Considering I got a "please re-activate your Hotmail account" phishing email and promptly deleted it, clearly there are some stupid people out there.

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

I changed my password and secret question just to be safe

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

http://news.bbc.co.uk/1/hi/technology/8292299.stm

It's other webmail accounts too.

re: [Merged] Thousands of hotmail/gmail/yahoo passwords leaked online
 

And people wonder why I only tend to use my own mail servers with my own domains :rolleyes: