Online list of hacked passwords

Other discussions not related to the Permanent Portfolio

Moderator: Global Moderator

Post Reply
WiseOne
Executive Member
Executive Member
Posts: 2692
Joined: Wed Feb 16, 2022 11:08 am

Online list of hacked passwords

Post by WiseOne »

A hacker group (sorry can't remember the name and I closed the web page already) has posted a partial list of their collection of 7 million username/passwords that were hacked from Dropbox (per them) vs somewhere else (per Dropbox).  They say they will post more when they get sufficient bitcoin "donations".

http://pastebin.com/aRgTJzzg
User avatar
Mountaineer
Executive Member
Executive Member
Posts: 5080
Joined: Tue Feb 07, 2012 10:54 am

Re: Online list of hacked passwords

Post by Mountaineer »

WiseOne wrote: A hacker group (sorry can't remember the name and I closed the web page already) has posted a partial list of their collection of 7 million username/passwords that were hacked from Dropbox (per them) vs somewhere else (per Dropbox).  They say they will post more when they get sufficient bitcoin "donations".

http://pastebin.com/aRgTJzzg
I changed my Dropbox password this morning.  I also endorse two factor authentication for a second layer of protection if you have not yet done so.

... Mountaineer
Put not your trust in princes, in a son of man, in whom there is no help. Psalm 146:3
PP67
Executive Member
Executive Member
Posts: 189
Joined: Tue Dec 27, 2011 8:19 am

Re: Online list of hacked passwords

Post by PP67 »

I can't wait for some enterprising young entrepreneur to set up a website where you just enter your username and password and it will check to see if it is on a hacked listing... and it's free!...:)
User avatar
dualstow
Executive Member
Executive Member
Posts: 15308
Joined: Wed Oct 27, 2010 10:18 am
Location: searching for the lost Xanadu
Contact:

Re: Online list of hacked passwords

Post by dualstow »

oh my
HAPPY FOURTH 🇺🇸
User avatar
Benko
Executive Member
Executive Member
Posts: 1900
Joined: Tue Sep 27, 2011 9:40 am

Re: Online list of hacked passwords

Post by Benko »

Mountaineer wrote: I changed my Dropbox password this morning.  I also endorse two factor authentication for a second layer of protection if you have not yet done so.

... Mountaineer
I had to search to see what Dropbox was.  Am I the only only one who thinks keeping personal information "in the cloud", or on any website or website type of backup is a really bad idea?  As to the obvious question, no I don't use facebook except for minimally for events.
It was good being the party of Robin Hood. Until they morphed into the Sheriff of Nottingham
gizmo_rat
Executive Member
Executive Member
Posts: 303
Joined: Mon Jan 17, 2011 5:25 am

Re: Online list of hacked passwords

Post by gizmo_rat »

Benko wrote: I had to search to see what Dropbox was.  Am I the only only one who thinks keeping personal information "in the cloud", or on any website or website type of backup is a really bad idea?
Dropbox appointed Condoleezza Rice to the board to allay any misguided privacy or data misuse fears you may have. The data you give away is in safe hands. 
WiseOne
Executive Member
Executive Member
Posts: 2692
Joined: Wed Feb 16, 2022 11:08 am

Re: Online list of hacked passwords

Post by WiseOne »

Benko wrote:
Mountaineer wrote: I changed my Dropbox password this morning.  I also endorse two factor authentication for a second layer of protection if you have not yet done so.

... Mountaineer
I had to search to see what Dropbox was.  Am I the only only one who thinks keeping personal information "in the cloud", or on any website or website type of backup is a really bad idea?  As to the obvious question, no I don't use facebook except for minimally for events.
Bad news Benko...if you use online banking or order anything online with a credit card or Paypal, your information is not only "in the cloud", it is possibly in the same cloud that Dropbox uses (Amazon S3).  Or, do you store your info at home on your personal computer?  That's not 100% safe either unless you don't have an internet connection.  Plus there's the issue of data loss, which is only mildly improved by backing up to a USB or optical drive.  Those are guaranteed to fail eventually and unless you check them regularly, you might not discover that one has failed until the moment you need it.

Usernames and passwords are just more "security theater".  I also endorse two factor authentication for those few sites that offer it - gmail and dropbox do.
User avatar
Mountaineer
Executive Member
Executive Member
Posts: 5080
Joined: Tue Feb 07, 2012 10:54 am

Re: Online list of hacked passwords

Post by Mountaineer »

Here is some additional information on two factor authentication:

Yesterday's news that hackers might've stolen some 7 million Dropbox credentials should've scared you into changing your password. And if you didn't already have two-step authentication enabled on your account, it should be pretty good reminder that you need to turn it on for every account possible.

If you're not worried about the security of your accounts, you're ignoring a serious threat that's confirmed by a neverending deluge of security breaches. Two-step authentication is one of the best ways to prevent unauthorized access to your accounts, even if somebody manages to steal your password. Here's how to do it.

Two-step, or two-factor authentication protects your accounts by requiring you to provide an additional piece of information after you give your password to get into your account. In the most common implementation, after correctly entering your password, an online service will send you a text message with a unique string of numbers that you'll need to punch in to get access to your account.

The idea is that you're drastically more secure if somebody needs both your password and the physical phone to get access to your accounts. Add a passcode to your phone, and you're safeguarded against someone stealing both.

Is it perfect? No. But it's way better than just irrationally hoping nobody ever gets a hold of your password.


Read the whole article and the "how to do" steps in the link:

http://gizmodo.com/its-time-to-enable-t ... 1646242605

... Mountaineer
Put not your trust in princes, in a son of man, in whom there is no help. Psalm 146:3
Libertarian666
Executive Member
Executive Member
Posts: 5994
Joined: Wed Dec 31, 1969 6:00 pm

Re: Online list of hacked passwords

Post by Libertarian666 »

Benko wrote:
Mountaineer wrote: I changed my Dropbox password this morning.  I also endorse two factor authentication for a second layer of protection if you have not yet done so.

... Mountaineer
I had to search to see what Dropbox was.  Am I the only only one who thinks keeping personal information "in the cloud", or on any website or website type of backup is a really bad idea?  As to the obvious question, no I don't use facebook except for minimally for events.
No, you're not the only one. However, I'm sure this is a very unpatriotic position to take!
Reub
Executive Member
Executive Member
Posts: 3158
Joined: Fri Jan 21, 2011 5:44 pm

Re: Online list of hacked passwords

Post by Reub »

I'm glad to see that my favorite password, LiBeRaLsSuCk wasn't on the list. ;)
Last edited by Reub on Wed Oct 15, 2014 6:05 pm, edited 1 time in total.
Post Reply