Check if your email is amongst those compromised in Gawker break-in
1–10 of 49 posts
Re: Check if your email is amongst those compromised in Gawker break-in
#2If you're on OSX, it's 'md5' and not 'md5sum.'
Re: Check if your email is amongst those compromised in Gawker break-in
#3Well, that is most unfortunate.
A big thanks for the heads up.
Re: Check if your email is amongst those compromised in Gawker break-in
#4What is the point of including the domain tied to the address? It just decreases the anonymity of what you've hashed, and actually does a disservice. There are corporate domains in there and the namespace of what to search for becomes a lot smaller.
In addition, my domain is my name. I saw many others in the file that this was the case for. It's not a big leap to compute my e-mail from 'jedsmith.org', and I'm sure it isn't for those guys either. You're leaking data with this view.
Here's a version that is far more anonymous (and easier, I think): http://undertow.jedsmith.org/gawker/
Re: Check if your email is amongst those compromised in Gawker break-in
#5What is the point of including the domain tied to the address? It just decreases the anonymity of what you've hashed, and actually does a disservice. There are corporate domains in there and the namespace of what to search for becomes a lot smaller. In addition, my domain is my name. I saw many others in the file that this was the case for. It's not a big leap to compute my e-mail from 'jedsmith.org', and I'm sure it…
I like it.
OS X users, if you are paranoid about using online tools for the SHA-256 hashing, you can do this from the command line with sha256deep.
Via Homebrew it'd go like this (replace the 1st step with whatever package manager you like):
$ brew install md5deep
$ echo -n my@email | sha256deep
d869524229c1e2f6139194fee1aac14f873b008dd0279458cbdfb6b3fbade1d2
Re: Check if your email is amongst those compromised in Gawker break-in
#6266 emails whose domain end with .gov
Very interesting.
Re: Check if your email is amongst those compromised in Gawker break-in
#7Thats great, thanks. I was relieved to not find my email in the list, although I could swear I've commented on gawker sites.
Re: Check if your email is amongst those compromised in Gawker break-in
#8What is the point of including the domain tied to the address? It just decreases the anonymity of what you've hashed, and actually does a disservice. There are corporate domains in there and the namespace of what to search for becomes a lot smaller. In addition, my domain is my name. I saw many others in the file that this was the case for. It's not a big leap to compute my e-mail from 'jedsmith.org', and I'm sure it…
I like it. OS X users, if you are paranoid about using online tools for the SHA-256 hashing, you can do this from the command line with sha256deep. Via Homebrew it'd go like this (replace the 1st step with whatever package manager you like): $ brew install md5deep $ echo -n my@email | sha256deep d869524229c1e2f6139194fee1aac14f873b008dd0279458cbdfb6b3fbade1d2
The hash is md5 not sha
Re: Check if your email is amongst those compromised in Gawker break-in
#9Fuck. What the fuck did I even need a Gawker account for?
(Thanks for making this. I was going to download the torrent, but assumed that I did not ever visit their site, much less make an account. Wrong!)
Re: Check if your email is amongst those compromised in Gawker break-in
#10Earlier quoted context omitted.
I like it. OS X users, if you are paranoid about using online tools for the SHA-256 hashing, you can do this from the command line with sha256deep. Via Homebrew it'd go like this (replace the 1st step with whatever package manager you like): $ brew install md5deep $ echo -n my@email | sha256deep d869524229c1e2f6139194fee1aac14f873b008dd0279458cbdfb6b3fbade1d2
The hash is md5 not sha
He's referring to using mine.