Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Should I Change My Password?

shouldichangemypassword.com

Post reply on HN
Print view View original

41–50 of 104 posts

Re: Should I Change My Password?

#42

Post by evan_ »

joezydeco wrote: post #40
evan_ wrote: post #35

Earlier quoted context omitted.

That's the date of the Gawker hack.

So any Google-served address is marked as vulerable because of the Gawker hack?

No, the google address is a red herring. My non-google account is listed as compromised on the same date due to a Gawker account I had registered. Many google accounts were compromised in other events on other dates.

Re: Should I Change My Password?

#44

Post by bluehex »

I wish I could query using a hash of my email address. No matter how much their FAQ says they won't use the email for anything but a "single database query" It's hard to trust anyone. Even if this site is legit (I think they probably are) this would be quite the front for a spammer to collect addresses.

Re: Should I Change My Password?

#45

Post by viraptor »

Strangely, the exact moment I received the email from mtgox, gmail told me I have to change the password. I wonder if they had a trigger for that message, or did someone really try to access my account (different password, so very unlikely)

Re: Should I Change My Password?

#46

Post by blantonl »

viraptor wrote: post #45

Strangely, the exact moment I received the email from mtgox, gmail told me I have to change the password. I wonder if they had a trigger for that message, or did someone really try to access my account (different password, so very unlikely)

The Gmail team downloaded the database of mtgox user account information that was leaked, matched gmail addresses to gmail accounts, and then proactively notified those Gmail users to change their passwords.

Re: Should I Change My Password?

#47

Post by dennisgorelik »

emp_ wrote: post #36
phlux wrote: post #20

Earlier quoted context omitted.

my passwrod, HUNTER2, is surely safe. I checked with some IT friends I met on IRC. Whenever I type my password, HUNTER2 - the rest of the world cant see it. So I am not worried.

Obligatory quote: http://bash.org/?244321

HN replaces passwords with stars too.

Please try it in your replies.

Re: Should I Change My Password?

#48

Post by dennisgorelik »

JoachimSchipper wrote: post #29
knotty66 wrote: post #25

Find the MD5 of your password and Google that. Plenty of sites still store an unsalted hash in the database and these are often compromised. If your hash turns up in a rainbow table in Google's index, definitely change it to something more secure (longer, more symbols).

I'm not sure that sending the MD5 of your password out over the wide internet is such a great idea. After all, if the bad guys didn't have an easy-to-crack hash of your password yet, you may have just given it to them! (Yes, I know that sniffing such things is not trivial. Still.)

Google publicly shares popular queries in search box.

If you are persistent with testing your password hash you risk making that hash public.

Re: Should I Change My Password?

#50

Post by invisiblefunnel »

blantonl wrote: post #46
viraptor wrote: post #45

Strangely, the exact moment I received the email from mtgox, gmail told me I have to change the password. I wonder if they had a trigger for that message, or did someone really try to access my account (different password, so very unlikely)

The Gmail team downloaded the database of mtgox user account information that was leaked, matched gmail addresses to gmail accounts, and then proactively notified those Gmail users to change their passwords.

Wow I didn't hear about that. Can you provide a source? EDIT: http://news.ycombinator.com/item?id=2672037
Post reply on HN