So where do we sign in to validate this works? Purely for research purposes. Not saying I want to sign in another person's account, but just out of curiosity, where do we sign in?
The chances of them still working are pretty slim...
FBI got Hacked, Reveals Hundreds of Passwords
21–30 of 100 posts
Re: FBI got Hacked, Reveals Hundreds of Passwords
#22Well at least I am surprised how many of them had strong passwords.
Things like "recruits.membership" for the recruits maybe not so much.
Re: FBI got Hacked, Reveals Hundreds of Passwords
#23I don't like this being listed on ycombinator. I have now just gone to a site with all the passwords on, I was expecting an article about it. I do not like the fact that I have just browsed that page!
Don't worry, citizen, you'll have plenty of time to explain it to the proper authorities.
Re: FBI got Hacked, Reveals Hundreds of Passwords
#24A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 password111111
What's wrong with 3 and 4?
It appears that, in general, the FBI staff are setting reasonable passwords. There are a few passwordNNN types but the majority are adequate and, in my opinion, would hold up well against a brute force vector, which is the primary purpose of password complexity.
Re: FBI got Hacked, Reveals Hundreds of Passwords
#25I think my favorite has to be this one: "$$$$$$$$$$$$$"
Cha ching!
Re: FBI got Hacked, Reveals Hundreds of Passwords
#26joseph.mcqueen@ic.fbi.gov - passwords123 > Joseph McQueen III, chief of the FBI personnel recruitment unit according to [0]. daniel.clegg@ic.fbi.gov - clegg.passwd > is an FBI supervisory agent Some others laura.eimiller@ic.fbi.gov - passwored12 William.So@ic.fbi.gov - cutelilyian191 tammy.mchugh@ic.fbi.gov - passwords123456 Rich.Ernst@osd.mil - ernst.richard celkins@vertizontalinc.com - celkins.vertizon joseph.herol…
I wish you had not done this. I did not want to see anybody's passwords, or create any sort of record that I myself downloaded the password list (which i did not.) Perhaps this is my fault for even clicking on the comments thread of this article. And of course there are many reasons to call me paranoid. Nonetheless, well, I will be moving on now!
Re: FBI got Hacked, Reveals Hundreds of Passwords
#27All these people with "password123" as their password (and there's a bunch similar to that) should be fired. Sidney MacArthur, you work for the Navy and you have that as a password?
fired? seriously?
Re: FBI got Hacked, Reveals Hundreds of Passwords
#28I see some email addresses referring to recent cases in there, i.e. findwhitey@ic.fbi gov. I wonder if these guys just tipped off mobsters still under investigation... or even read some of those case mailing lists (presuming that's what they are).
Re: FBI got Hacked, Reveals Hundreds of Passwords
#29This is what you get for encouraging just one type of password strength (i.e. character set) while almost ignoring another (i.e. length). For example I bet this wouldn't pass the FBI's requirements: - Clowns with clown makeup But this would: - password123
Why do you think there were such requirements?
Amongs the passwords I see: marklevett, looskwoooish or even qwertylolqwerty.
Browsing the list the only think I could think they enforced was a minimum character count. I see no whitespace or underscores either.
So I guess Clowns.with.clown.makeup would've worked.
Anyway, the real issue is: why were those passwords stored as plaintext?
Re: FBI got Hacked, Reveals Hundreds of Passwords
#30I don't like this being listed on ycombinator. I have now just gone to a site with all the passwords on, I was expecting an article about it. I do not like the fact that I have just browsed that page!
I agree actually. I have no reason to actually want to see their private information. I do want to know what happened.