Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[SAS~Storebror]

Dear all,

The World's suffering from a really big data leak issue again.
The 773 Million Record "Collection #1" Data Breach puts 773 million email addresses at risk, with 21 million passwords being unveiled upon them.
Together with older, known data breaches, this means that there's quite some risk that you might be among those who have been "pwned" as well.

I'd like to encourage all of you to visit Troy Hunt's website

https://haveibeenpwned.com/

to check and see whether the email address you're using on our forums, or any other you're using right now, is affected too.
At that opportunity, don't forget to also check "common" passwords which you use (you shouldn't anyway, it's better to use different passwords for each account, but that's another story):

https://haveibeenpwned.com/Passwords

Check it now, better safe than sorry.
And don't worry, these websites are safe. Read about the background of that site here: https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F


Mike

[Gubi]

I'm good...so far...

[Epervier]

How much confidence can I have in the links you give?
None! None!
What a wonderful way to get addresses and passwords!
You are told everywhere and all day long never to give your password... and here on this link we tell you if your password is reliable?
Scam!

In my old job we used these kinds of "traps" to get information.... 
But you are free...

[Dimlee]

Thanks for reminder.
It's better to spend some time on security improvements than to be sorry later, indeed.

Interesting... this Troy Hunt's database confirmed my way of priorities given to various email accounts. Sometimes by intuition, sometimes based on knowledge.

Professional/business accounts (I used 3 in past five years) - none affected.
Proton - not affected.
Gmail account - pwned once. Thank you, Linkedin...
Yahoo - 4 times. I have downgraded Yahoo to "secondary" email quite long time ago. Probably I should shut it up eventually.
Mail.ru -  8 times. I was one of the first subscribers in 1990s and used it extensively until 2008-2009 when I learned that young hackers in Moscow could break in any email box for the price of $100-$200. Since then it became a "spam bin" for me. It seemed I was right.

[SAS~Storebror]

How much confidence can I have in the links you give?
None! None!
What a wonderful way to get addresses and passwords!
You are told everywhere and all day long never to give your password... and here on this link we tell you if your password is reliable?
Scam!

In my old job we used these kinds of "traps" to get information.... 
But you are free...

Gabriel... as much as I'm a careful person like you are, here you are wrong.
I've sent you the link to Wiki about that site: https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F
You can have an orphane in french: https://fr.wikipedia.org/wiki/Have_I_Been_Pwned%3F

The person behind that site, Troy Hunt, is definitely not someone who's trying to steal away passwords from anyone.
Maybe you also want to read this: https://www.troyhunt.com/about/
The least thing a "bad guy" would do is to travel the world and let everyone know, see, hear and if necessary, feel that he's real.

So please don't confuse our users with conspiracy theories


Mike

[Epervier]

In my career I've seen too many bad things.
And I recognize that when it comes to computer security, I sometimes have hermit's reactions!     

[larschance]

I am getting an increasing number of messages that my computer has viruses but when I run both my anti virus systems it says I am clear. There seem to be a lot of false messages, fake news if you like in modern terms. I realise that even the best anti virus can only pick up 80 to 90 per cent and the companies are always trailing the hackers. However by using vpn and never using your own name on email you can run with it. And as already said always try to use a different password for each account.

[SAS~Malone]

i have been pwned.
one of my 'common' passwords also recently breached, and used 11 times.
not good, to put it mildly.
most of my less common passwords appear to be safe, so time to change the affected one.
damn.

[Dimlee]

Just to add.
My old Yahoo and Mail.ru passwords were pwned many times apparently.
That does not add trust to both services.

Gmail, Proton and business accounts old passwords - never pwned.

[Knochenlutscher]

Thanks for the hint.
Dunno if it was related to a recent issue I had.
It seems there was a try to break my Amazon
Account, I had a call from their Security center 2 months
ago that someone tried to use it without my consent and failed
for being suspicious and well known in the malware sector.
Changed my password now again.

Happy evening
Tobias

[SAS~Storebror]

As a side effect of this recent data leak issue, you have to be super careful when you want to buy surprisingly "cheap" items e.g. from ebay at the moment.
While in the past hackers concentrated on hijacking old abandoned ebay accounts in order to "sell" hot items (like e.g. new graphics cards which can easily be worth a thousand bucks or more) at 50% discount, just to collect the money from unsuspecting users, now things got worse because they hijack both ebay and bank accounts from active ebay stores and "sell" these items at rather small (10-20%) discounts, so it's much harder to spot when there's fake sales at the moment.
As a rule of thumbs, don't buy anything that's not covered by some kind of insurance, e.g. on ebay only buy through paypal or credit card.
If your "cheap" seller only accepts bank transfer: Don't do it.


Mike

[Dimlee]

I'm regular buyer on Ebay and from time to time I notice those "super hot" deals.
Like the latest Dyson vacuum cleaner for $200 or Lenovo Thinkpad for $350, etc. Brand new in undamaged packing and with global warranty, of course. Usually such buyers have no rating and date of a/c creation is from last week or so. 

Good reminder from Storebror about the payment method. Luckily, responsible sellers do request PayPal.