Live data from Hacker News

LeakedIn

leakedin.org

121–130 of 194 posts

Re: LeakedIn

#121
post #120
post #80

Earlier quoted context omitted.

Just pop a space at the beginning and it won't go into shell history.

That's a bash-ism that's controlled by the $HISTCONTROL environment variable, not universally-applicable advice. $HISTCONTROL set to "ignorespace" or "ignoreboth" may or may not be the default, depending on your distribution.

Yeah already replied below specifying that - I was under the impression that it's default to on in most distros, but don't actually have a clue which do/don't.

Re: LeakedIn

#122
post #74
post #62

Earlier quoted context omitted.

or easier and shorter: printf PaSSw0rd | sha1sum

Or call shasum or sha1sum and input your password on stdin so your shell history doesn't contain your password in plain text.

how do you get rid of the carriage return as last char that way?

Re: LeakedIn

#123
post #80
post #74

Earlier quoted context omitted.

Or call shasum or sha1sum and input your password on stdin so your shell history doesn't contain your password in plain text.

Just pop a space at the beginning and it won't go into shell history.

it will still be in ps output for a short while...

Re: LeakedIn

#126
post #63

Earlier quoted context omitted.

http://www.inutile.ens.fr/estatis/password-security-checker/ (BTW, be sure to type some gibberish into the provided box and hit submit, so you can see why I think this is a very relevant link.)

The Terms and Conditions are hilarious: c. You agree to pay $ 100,000 for your use of the Estatis Free Password Security Checker if we ever ask for it.

"All States shall be entitled to lay submarine cables and pipelines on the bed of the high seas."

oh dear.

Re: LeakedIn

#127
post #26

I quickly wrote a script to do this locally, not the most efficient, but I'm at work ;) https://github.com/hungtruong/LinkedIn-Password-Checker

  $ cat combo_not.txt | grep `printf linkedintrouble | sha1sum`
  3ac85868a20c977661a12f770f0d116f87c74831
  $ cat combo_not.txt | grep `printf nathanlinkedin | sha1sum`
  a4d28368130ad555c77ec6a4dd18b8977ac0f589
  $ cat combo_not.txt | grep `printf mypassword | sha1sum`
  $ cat combo_not.txt | grep `printf yourpassword | sha1sum`
  $

Re: LeakedIn

#128
post #14

Mine was not in the list. I had a non-dictionary password with letters and numbers, 8 characters, and it was at least several months old. (If we can collect enough data points of whose passwords are on it or not, how old they are, and how complex the password was, we should be able to narrow down a potential date range for the list and the odds that the compromised list is full or partial.)

You're confusing "not on the list" with "not in the hacker's possession".

Exactly, because the hacker only posted the passwords he neede d help with.
Post reply on HN