I got an e-mail from LinkedIn today saying that I would be forced to reset my password upon my next login. They didn't say why. I guess this explains it.
LinkedIn password leak
11–20 of 218 posts
Re: LinkedIn password leak
#12Do we know how strong their hashing scheme was?
Edit: SHA-1... You'd think a site as big as linkedin would have strong hashing...
Re: LinkedIn password leak
#13Do we know how strong their hashing scheme was? Edit: SHA-1... You'd think a site as big as linkedin would have strong hashing...
Just read about it being sha-1 (source: http://www.pcworld.com/article/257045/security/6-5m-linkedin...).
Re: LinkedIn password leak
#14beyond linkedin logins, they also have a zillion email passwords from the bad old days before oauth.
Re: LinkedIn password leak
#15Woo, I created my LinkedIn profile in 2015, so I should be safe since the leak is supposedly from 2012. If anyone else isn't sure when they made their LinkedIn, you can see your join date here (ctrl+f "Member since"): https://www.linkedin.com/psettings/
I created my profile at 2012 - thanks for that information !
Is it possible for me to check the data link to look my name up.
Re: LinkedIn password leak
#16> test sample passwords with our password checker here. Do NOT do that with your exact password though :)
It should of course not determine if you change your password, but no harm putting a password you no longer use
Re: LinkedIn password leak
#17You can see how long you've been a LinkedIn member by going to your Privacy & Setting page, where it displays at the top.
Re: LinkedIn password leak
#18> test sample passwords with our password checker here. Do NOT do that with your exact password though :)
Link: https://password.kaspersky.com/
I'm impressed by the password cracking estimation with the Tianhe-2 Supercomputer. A 10-character password containing uppercase letters, lowercase letters, and numbers, which is estimated at a 4 year crack with a Macbook Pro, takes 31 seconds on the supercomputer.
Re: LinkedIn password leak
#19I got an e-mail from LinkedIn today saying that I would be forced to reset my password upon my next login. They didn't say why. I guess this explains it.
The email did say why:
"We've recently noticed a potential risk to your LinkedIn account coming from outside LinkedIn. Just to be safe, you'll need to reset your password the next time you log in."
Re: LinkedIn password leak
#20I got an e-mail from LinkedIn today saying that I would be forced to reset my password upon my next login. They didn't say why. I guess this explains it.
The email did say why: "We've recently noticed a potential risk to your LinkedIn account coming from outside LinkedIn. Just to be safe, you'll need to reset your password the next time you log in."
Yeah, that's vague garbage. What it should have said was: "Our password database was stolen and we fucked when we tried to roll our own password hashing. Your password is likely compromised and you should change it. If you use the password on multiple websites, you should change it everywhere."