Have you been pwned?

[Jog On]

Huge data breach reveals hundreds of millions of emails and passwords from across the internet | The Independent

Hundreds of millions of email addresses and passwords have been posted online for anyone to download.

Nearly 800 million logins are in the huge dump which contains information from thousands of data breaches.

The stolen details are likely to be in use for years as hackers attempt to take over affected users accounts.

Tool to check here:

Have I Been Pwned: Check if your email has been compromised in a data breach

[NickFitz]

Got an email about this from Have I Been Pwned last night; a couple of my email addresses in there, but I already knew about them from the original pwnage - this latest one is aggregating all the data from a load of earlier leaks.

Quite amused that a number of email addresses that appear on Have I Been Pwned for my domain aren’t ones I’ve ever used - they’re from spammers having used rubbish like 2230947@{my domain} for spoofing From: addresses and the like

I’m glad I use separate addresses for different services, as it means I can tell when my details have been stolen from (among others) Adobe, LinkedIn, vBulletin, GitHub, Dropbox, and Tumblr

[northernladuk]

Yeah I got that mail as well and I was surprised as I was already aware I'd been found on some list that's been distributed already. Dunno if they are just re-iterating it or they've found another.

I checked it all when I got that mail with my email and (old) password in the title which threatened to distribute videos taken by my (non existing) webcam of me spanking the monkey to websites. I knew it was fake because I do that while reading CUK not porn but that's for another thread.

Crapped myself when I got that mail and had to check a few 100 log ins and passwords I have stored in RoboForm. Found a couple of very old throw away sites with the same password which I changed. Spent a couple of weeks going through all my accounts closing them down and using GDPR to remove my details.

Even though I'm as close to certain as I can be I'm safe it does un-nerve me when I get this type of mail from the Pwnd site.

Spoke to my other half and some other members of the family that use the same password for everything and have done for ever which surprised me. Didn't think anyone did that.

I've got the Adobe and LinkedIn ones and I think I've got Experian on there as well. I'm going to check again when I get home.

[xoggoth]

Got pwned several months ago. Fortunately BT make a good job of chucking emails into the spam box. They are all totally unconvincing anyway, full of funny characters, awful grammar, mostly about making millions from bitcoin etc. Can't believe many would fall for them anyway.

PS Although I find it very hard not to clink on links in frequent emails from a 'lady' asking me to lick her.

[PhiltheGreek]

Got pwned several months ago. Fortunately BT make a good job of chucking emails into the spam box. They are all totally unconvincing anyway, full of funny characters, awful grammar, mostly about making millions from bitcoin etc. Can't believe many would fall for them anyway.

PS Although I find it very hard not to clink on links in frequent emails from a 'lady' asking me to lick her.

I got those too. They're PM's from Scooter though.

[meridian]

Spoke to my other half and some other members of the family that use the same password for everything and have done for ever which surprised me. Didn't think anyone did that.

Guilty of this myself. It’s easier when logging into sites across multiple devices...

I’ve changed most of my passwords now into unique and greater strength ones using 1Password. Next step is to remove all the stored passwords in Chrome.

[northernladuk]

Guilty of this myself. It’s easier when logging into sites across multiple devices...

I’ve changed most of my passwords now into unique and greater strength ones using 1Password. Next step is to remove all the stored passwords in Chrome.

RoboForm is pretty good. It can generate a random password with the press of a button and then when you've entered it you can save it. You can access them on a computer, in the cloud and mobiles. Been using it for years. There are other ones now that I'm sure are just as good but I couldn't live without it nowadays.

[xoggoth]

Use decent different passwords for important stuff like banks, Amazon and other shopping, HMRC etc. but tend to use same for forums etc. where there's no money involved.

Can't see how somebody logging into CUK as me is a major problem or am I missing summit?

PS Apart from ruining my reputation by continually posting about large bottoms. That isn't me.

[ladymuck]

I cropped up on the list too. Agree it seems to be an amalgamation of previous hacks/breaches.

I have all my domains monitored on haveibeenpwned. Very useful service and I chuck him a beer every now and then for good measure.