Fascinating. Any thoughts as to how this came about?
I think this is the "bitcoin gmail dump". My email is listed here, but it has a throwaway password that I've never used as my gmail password.
4M gmail addresses with passwords leaked (large html file, 150megs)
11–20 of 31 posts
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#12Fascinating. Any thoughts as to how this came about?
[deleted]
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#13Fascinating. Any thoughts as to how this came about?
A friend tells me he was emailed by https://haveibeenpwned.com/, letting him know his details were at that link.
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#14Can anyone see if my name is in there?
I'm sure it'll get added to haveibeenpwned.com fairly quickly. That said I'm trying to grab it for the same reason. If your email is in your HN profile I'll give it a check.
Pretty sure it's already there, looks like https://haveibeenpwned.com/PwnedWebsites#BTSec
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#15I give this dump 12 more minutes until someone at Google uploads it to an internal tool to invalidate all of the emails listed.
Unfortunately, I wouldn't be shocked if someone out there had a tool that can escalate this exploit just as quickly.
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#16[deleted]
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#17Probably passwords from other sites, not gmail. Lists my email next to a password I've never used on gmail, or any other important site.
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#18This is from 2014 and likely not a Google hack or leak but a subset of credentials revealed by hacks or leaks from other sites. https://productforums.google.com/forum/#!topic/gmail/4q3AYMi... and https://facepunch.com/showthread.php?t=1423764 refer to this link. Edit to add: https://haveibeenpwned.com/PwnedWebsites#BTSec
Indeed... My email is listed here, but it shows "password" as its password, which is completely false.
I only use "password" in random websites that force me to register (but that I'll never visit again).
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#19Earlier quoted context omitted.
I'm sure it'll get added to haveibeenpwned.com fairly quickly. That said I'm trying to grab it for the same reason. If your email is in your HN profile I'll give it a check.
Pretty sure it's already there, looks like https://haveibeenpwned.com/PwnedWebsites#BTSec
Oh nice, I missed it in there. Sometimes it takes an hour or so before I see new ones in there.
Re: 4M gmail addresses with passwords leaked (large html file, 150megs)
#20Can anyone see if my name is in there?
I'm sure it'll get added to haveibeenpwned.com fairly quickly. That said I'm trying to grab it for the same reason. If your email is in your HN profile I'll give it a check.
I got an email for it on Nov 25.
Subject: Yours is one of 4,788,657 email addresses found in a paste titled "pred.me"
At the time, it showed up on the "Latest Pastes" on HIBP, but I think it's aged out now.