Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

43M passwords hacked in Last.fm breach

techcrunch.com

Post reply on HN
Print view View original

11–20 of 172 posts

Re: 43M passwords hacked in Last.fm breach

#11

Post by NeutronBoy »

rawrmaan wrote: post #6
jrowley wrote: post #3

Earlier quoted context omitted.

Also the bulk of the users signed before that date. [0] Last.fm is one of my favorite sites. Sad that is dying :( 0. rough heuristic: https://www.google.com/trends/explore?date=all&q=last.fm Edit: If anyone wants to add me on last.fm here is my profile! http://www.last.fm/user/joer14

Wow! They had some great growth going on and it seemed to hit a wall hard around 2008-2009. Any idea why?

Soundcloud launched in 2008. Spotify launched in 2008. Only a year or so after Facebook opened signups to anyone IIRC. Not exactly sure what the impact on Last.fm would have been but it evidently wasn't good.

Re: 43M passwords hacked in Last.fm breach

#13

Post by rconti »

imaginenore wrote: post #12
xorgar831 wrote: post #10

This is practically a startup, a service that just monitors and automatically updates your passwords as they get leaked over time.

And when it gets hacked, everyone is truly f####d.

Did you salt that hash? I'm having a hard time brute-forcing it.

Re: 43M passwords hacked in Last.fm breach

#15

Post by anoonmoose »

sotojuan wrote: post #7
jrowley wrote: post #3

Earlier quoted context omitted.

Also the bulk of the users signed before that date. [0] Last.fm is one of my favorite sites. Sad that is dying :( 0. rough heuristic: https://www.google.com/trends/explore?date=all&q=last.fm Edit: If anyone wants to add me on last.fm here is my profile! http://www.last.fm/user/joer14

How is Last.fm one of your favorite sites after that horrible redesign that erased tons of user-generated content?

Because it still does exactly what I want it to do, and what I've wanted it to do since I signed up in 2004, which is keep logs of every song that I listen to. The user-generated content side of it was added after I signed up (I think?) so I don't see how I could really miss it.

230K songs since 2004. http://www.last.fm/user/ryxxui

Re: 43M passwords hacked in Last.fm breach

#16

Post by anexprogrammer »

rawrmaan wrote: post #6
jrowley wrote: post #3

Earlier quoted context omitted.

Also the bulk of the users signed before that date. [0] Last.fm is one of my favorite sites. Sad that is dying :( 0. rough heuristic: https://www.google.com/trends/explore?date=all&q=last.fm Edit: If anyone wants to add me on last.fm here is my profile! http://www.last.fm/user/joer14

Wow! They had some great growth going on and it seemed to hit a wall hard around 2008-2009. Any idea why?

Easy. CBS bought them late 2007. Dev and updates pretty much stopped. They limited tracks you could play directly.

Then they killed radio.

I'm really sad to see it die, it was better at introducing me to new artists than any other service before or since, and the radio was brilliant.

Re: 43M passwords hacked in Last.fm breach

#17

Post by AdmiralAsshat »

Speaking of Last.fm, I really wish the thing had app-specific passwords as an option. I've been shuffling between Linux music players as of late, with Scrobbling as one of my requirements. Most of them have just required a login and pass instead of using OAuth. It would be nice if last.fm let me authorize them on an app-by-app basis.

Re: 43M passwords hacked in Last.fm breach

#20

Post by StavrosK »

It looks like our current approach isn't working. What if we had each site publish its login/registration endpoints in a URL, e.g. .well-known/loginurls?

Then the password manager could detect you're trying to register or log in and log you in itself, generating your password in the process. Why aren't logins machine-accessible yet?

Post reply on HN