Oh.. Didn't know anyone already made this - i also made a tool, but it doesn't send your whole hash over the wire (only the last 4 chars). http://olemartin.org/linkedin-passwords/
[deleted]
LeakedIn
71–80 of 194 posts
Re: LeakedIn
#72Oh.. Didn't know anyone already made this - i also made a tool, but it doesn't send your whole hash over the wire (only the last 4 chars). http://olemartin.org/linkedin-passwords/
[deleted]
Re: LeakedIn
#73Now there's a great idea! Provide your password to some random site purporting to check if your password's been compromised.
http://www.inutile.ens.fr/estatis/password-security-checker/ (BTW, be sure to type some gibberish into the provided box and hit submit, so you can see why I think this is a very relevant link.)
The Terms and Conditions are hilarious:
c. You agree to pay $ 100,000 for your use of the Estatis Free Password Security Checker if we ever ask for it.
Re: LeakedIn
#74Earlier quoted context omitted.
If you don't particularly trust the included click.js script, you can generate your password's SHA-1 via python fairly easily python -c 'import hashlib; print hashlib.sha1("PaSSw0rd").hexdigest()'
or easier and shorter: printf PaSSw0rd | sha1sum
Or call shasum or sha1sum and input your password on stdin so your shell history doesn't contain your password in plain text.
Re: LeakedIn
#75Now there's a great idea! Provide your password to some random site purporting to check if your password's been compromised.
http://www.inutile.ens.fr/estatis/password-security-checker/ (BTW, be sure to type some gibberish into the provided box and hit submit, so you can see why I think this is a very relevant link.)
That's a much better link than the one I've been using: http://twitterphishr.com/
Re: LeakedIn
#76Earlier quoted context omitted.
You can provide your own hash, and a quick source check reveals that plaintext is being converted into a hash client-side, so only hashed data is being sent to the server.
'password' was actually in use - go figure.
Not necessarily a bad security practice. If you want a throwaway account for whatever reason, then why increase your cognitive load by coming up with a good password?
Re: LeakedIn
#77Now there's a great idea! Provide your password to some random site purporting to check if your password's been compromised.
In other news I have a startup on credit card security Just submit your credit card number, CVV2 and expiration date and it'll check if it has been stolen over the internet for you
Oh, I think I know you. You're that Nigerian prince I keep getting emails from, right?
Re: LeakedIn
#78Well the fun I'm having with this is checking all the trivial passwords that people still use despite warnings.
No, mine isn't in the list.
Re: LeakedIn
#79Now there's a great idea! Provide your password to some random site purporting to check if your password's been compromised.
In other news I have a startup on credit card security Just submit your credit card number, CVV2 and expiration date and it'll check if it has been stolen over the internet for you
Will you be directing the form submission page to a static HTML page reading "Yes"?