Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

773M Password ‘Megabreach’ Is Years Old

krebsonsecurity.com

Post reply on HN
Print view View original

121–130 of 177 posts

Re: 773M Password ‘Megabreach’ Is Years Old

#121

Post by frereubu »

ascar wrote: post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

I had exactly the same. I ignored them, then, more interestingly, they started coming with the first character of the password missing, like a kind of digital entropy. Reminds me of the fantastic Alvin Lucier audio piece "I Am Sitting In A Room": https://en.wikipedia.org/wiki/I_Am_Sitting_in_a_Room

Re: 773M Password ‘Megabreach’ Is Years Old

#122

Post by ukyrgf »

mipmap04 wrote: post #4
ocdtrekkie wrote: post #2

All of the breaches are, especially these compilation ones. I switched email addresses back in 2016, and despite having accounts basically everywhere, my newer account has never showed up in a breach. Even the email address I used primarily for new accounts years before that hasn't shown up in any. Only my original created-in-2006 Gmail account ends up in breach lists.

On the topic of old email addresses, make sure your old email provider doesn't release your email address after so many years / months. This is a common way to get access to accounts by creating a new email account with the same address as an expired address and then using an email-based password reset to gain access to the account. Happened to my wife with an old email address from high school.

I lost the password to the @hotmail.com address I used for Myspace, and wanted so desperately to delete the account. Last year, just on a whim, I tried to register it and they actually let me.

Turns out it wasn't the email I used on Myspace.

Also, is Myspace back? Somehow my profile and pictures are on there again, but I thought they removed personal profiles years ago?

Re: 773M Password ‘Megabreach’ Is Years Old

#123

Post by jchw »

bytematic wrote: post #118
jammygit wrote: post #115

This has been the event that has finally convinced my wife to use a password manager. I'm torn between bitwarden and 1Password though. Anyone care to weigh in on the options? My biggest concern with BitWarden is the lack of automated testing edit - just fyi, Bitwarden responded on github last month with a plan to add some testing, and I think some of their code does use automated testing. They have issues on GitHub t…

Why not keepass, I've never had an issue and it works great!

I've used KeePass and one issue I do take with it is the UX. Bitwarden and 1password feel like cohesive apps and have good integration with many platforms. For KeePass I felt uneasy about some of the ports of it. There's a lot of good ones on desktop, less so on mobile.

Syncing is also a thing I prefer 1password and Bitwarden for. They both have cloud syncing by default. Some won't want that but I definitely do.

Re: 773M Password ‘Megabreach’ Is Years Old

#124

Post by lozaning »

MarsAscendant wrote: post #27
ascar wrote: post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

> recorded watching porn What a damning position to be in, in 2019.

Right!? If some random unknown contact sends me a salacious video of one of my actual contacts, my one and only question is to the unknown contact asking why they're sending this to me.

Re: 773M Password ‘Megabreach’ Is Years Old

#125

Post by Lenad »

_ws0d wrote: post #94
calibas wrote: post #66

Earlier quoted context omitted.

I just got one with nearly the same wording. "I am aware [old password] is your passphrases. Lets get directly to point..." sent from 202.140.33.240 using the spoofed email address oo@r.com. The bitcoin address is different: 1ELzee2T9Wd5YPTYhWbWD3xK7xB5tJ94J4 Looks like the scam worked a couple times so far: https://www.blockchain.com/btc/address/1ELzee2T9Wd5YPTYhWbWD...

Yep I got a different one too, 1GjZSJnpU4AfTS8vmre6rx7eQgeMUq8VYr

Different too for me 1KeCBKUgQDyyMpaXhfpRi2qUvyrjcsT44o

Re: 773M Password ‘Megabreach’ Is Years Old

#126

Post by [deleted] »

ascar wrote: post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

[deleted]

Re: 773M Password ‘Megabreach’ Is Years Old

#127

Post by bena »

lozaning wrote: post #124
MarsAscendant wrote: post #27

Earlier quoted context omitted.

> recorded watching porn What a damning position to be in, in 2019.

Right!? If some random unknown contact sends me a salacious video of one of my actual contacts, my one and only question is to the unknown contact asking why they're sending this to me.

"Yes, I'm aware he jerks it, we all do. Doesn't mean I want to watch him box the bishop."

Re: 773M Password ‘Megabreach’ Is Years Old

#128

Post by rak00n »

ascar wrote: post #18

Since a few weeks ago I receive spam emails threatening me with an old password I no longer use. I wonder if it's related to this collection. It starts with: > I am well aware [old password I think I swapped out everywhere, but definitely in all important places, when I started to use random keepass pws two years ago] is your pass words. Lets get straight to the point. None has compensated me to check about you. You…

There is a black mirror episode very similar to that blackmailing.

Re: 773M Password ‘Megabreach’ Is Years Old

#130

Post by SlowRobotAhead »

jchw wrote: post #123
bytematic wrote: post #118

Earlier quoted context omitted.

Why not keepass, I've never had an issue and it works great!

I've used KeePass and one issue I do take with it is the UX. Bitwarden and 1password feel like cohesive apps and have good integration with many platforms. For KeePass I felt uneasy about some of the ports of it. There's a lot of good ones on desktop, less so on mobile. Syncing is also a thing I prefer 1password and Bitwarden for. They both have cloud syncing by default. Some won't want that but I definitely do.

The problem I personally have with KeePass is sharing and that you are on your own for many things.

You CAN make mistakes with KeePass. You pretty much can’t make mistakes with a service.

I’ve set about 100 people up on LastPass including my mom. I recommend it as a very good thing normal people will actually use.

Post reply on HN