Should I Change My Password?

Post by joeyh » Thu, Jun 23, 2011, 9:55 PM UTC

ch0wn wrote: post #6

VMG wrote: post #3

The site should treat @gmail.com and @googlemail.com as equal. I found my leaked MtGox mail address for one variant but not the other.

username+randomstring@g[oogle]mail.com should be normalized to username@gmail.com, as well. I used a custom extension for MtGox that wasn't found. That said, really useful service. On the other hand it's sad that we actually need something like this.

Post by sbierwagen » Thu, Jun 23, 2011, 10:26 PM UTC

jacobolus wrote: post #38

sbierwagen wrote: post #24

Earlier quoted context omitted.

In HTML5, both the and tags are completely optional, as are their closing tags. Since there's no other content on this "page", you don't need to close the header either, so you could replace everything with: YES

The title tag is required, though (unless you’re in an iframe), and an h1 tag must be closed (unlike, e.g., paragraph and list item tags). So your minimal page looks like: YES YES

Post by viraptor » Thu, Jun 23, 2011, 11:41 PM UTC

blantonl wrote: post #46

viraptor wrote: post #45

Strangely, the exact moment I received the email from mtgox, gmail told me I have to change the password. I wonder if they had a trigger for that message, or did someone really try to access my account (different password, so very unlikely)

The Gmail team downloaded the database of mtgox user account information that was leaked, matched gmail addresses to gmail accounts, and then proactively notified those Gmail users to change their passwords.

Post by mjschultz » Fri, Jun 24, 2011, 12:04 AM UTC

josegonzalez wrote: post #54

jplewicke wrote: post #32

It'd be cool if they added an option to subscribe for $10/year for a quick SMS and email notification if your account is compromised. I'd get it for myself and my family.

"Here is the password I use for potentially important information, and here is the email and phone number that would likely be associated with that password. Let me know when your database get's hacked so that way I can change my password and we can do this exercise again." Something like that you mean?

Post by joezydeco » Fri, Jun 24, 2011, 1:36 AM UTC

evan_ wrote: post #42

joezydeco wrote: post #40

Earlier quoted context omitted.

So any Google-served address is marked as vulerable because of the Gawker hack?

No, the google address is a red herring. My non-google account is listed as compromised on the same date due to a Gawker account I had registered. Many google accounts were compromised in other events on other dates.