[Merged] Thousands of hotmail/gmail/yahoo passwords leaked online

[SnoopZ]

Change your password if you think you may be affected!

Neowin has received information regarding a possible Windows Live Hotmail "hack" where password details of thousands of Hotmail accounts have been posted online.

http://www.neowin.net/news/main/09/1...-leaked-online

[Aragorn]

As one of the comments points out, MS would not be stoopid enough (I hope) to store clear text passwords.
If someone has the hashed passwords and has decrypted some of them that would be pretty bad news.

Ta for infor password changed

[webcrawler2050]

Originally Posted by SnoopZ

Change your password if you think you may be affected!



http://www.neowin.net/news/main/09/1...-leaked-online

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

Originally Posted by webcrawler2050

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

however they store it I still changed it lol

I do not even create my own passwords. The only one I type into my machine is a master password that matches no other and I use a password manager to create them for me

[Druchii]

Originally Posted by webcrawler2050

Hotmail, doesn't store in text file - they store, in a very secure method, using MD5 etc etc

MD5 is no longer secure.

[webcrawler2050]

Originally Posted by Druchii

MD5 is no longer secure.

MD5 with other varients, depending on database and scripting language

[Druchii]

Password + Salt + MD5 is much better

[SnoopZ]

BBC News have reported on it now.

http://news.bbc.co.uk/1/hi/technology/8291268.stm

Sounds like they were collected using a phishing scheme, so if you only use it to access hotmail you should be ok.

---------- Post added at 17:53 ---------- Previous post was at 17:52 ----------

It also mentions somewhere that they were only accounts beginning with A or B

if A and B was posted would it not be prudent to think maybe there are more they have not posted yet? air on the side of caution after all its hardly a ball ache to change a password by rights you should do regularly anyway

[Turkey Machine]

Considering I got a "please re-activate your Hotmail account" phishing email and promptly deleted it, clearly there are some stupid people out there.

[MadGamer]

I changed my password and secret question just to be safe

[Russ]

http://news.bbc.co.uk/1/hi/technology/8292299.stm

It's other webmail accounts too.

[Kymmy]

And people wonder why I only tend to use my own mail servers with my own domains