LeakedIn.org - check if your password was leaked

[NickFitz]

A few years ago I was asked to quickly check something on a company's site, and told to ring some woman there as she could let me have the FTP password. She was (quite rightly) not keen on giving this information out over the phone to a complete stranger she'd never heard of who had rung her out of the blue. I assured her this was quite all right, and that I'd email {the bloke whose original email with the request had been forwarded to me} to ask him to confirm to her that it was OK.

Turns out said bloke was the MD and, apparently fearful of being the cause of him being distracted by a comparatively minor matter, she immediately told me the password.

It was "password".

[FiveTimes]

just been to leakedin and there is nowhere to put your password.

I've generated the hash but not sure where to look.

[NickFitz]

just been to leakedin and there is nowhere to put your password.

I've generated the hash but not sure where to look.

Do you have a script blocker running by any chance?

It looks like this to me EDIT: and with JS disabled, the search box is replaced by the sentence "You must have JavaScript running to check your password":

[FiveTimes]

Do you have a script blocker running by any chance?

It looks like this to me EDIT: and with JS disabled, the search box is replaced by the sentence "You must have JavaScript running to check your password":

I have jscript enabled - using XP and IE7.
However I tried with Chrome and I could see the entry box.
Only problem is I cant remember the password
I tried a couple and one has been cracked and the other hasn't !

[NickFitz]

Me too.

I think "PASSWORD2" should do the business adequately.

The thing is, you could use that now and the baddies wouldn't know it was associated with your account, even though it's been cracked

On the other hand it seems that LinkedIn haven't got any idea of how the data got stolen in the first place, which means the baddies could be grabbing everybody's passwords all over again now that they've been changed

[NotAllThere]

just been to leakedin and there is nowhere to put your password.

I've generated the hash but not sure where to look.

I have the same with IE 8. However, worked nicely on my phone. Not hacked. Of course, this could simply be a list of dictionary attack strings.

...Turns out said bloke was the MD and, apparently fearful of being the cause of him being distracted by a comparatively minor matter, she immediately told me the password.

It was "password".

Doing a company wide virus sweep (in 1992), went into the directors' suite, and the passwords were all on postit notes on the secretary's monitors. Sort of not-very-secretaries.

[SimonMac]

Mine is safe (or it was until I just entered it into a random website) but then again I don't use a dictionary word, and intersperse it with numbers and symbols so its very hard to crack with a dictionary type attack.

[SimonMac]

My password is always changed to relate to the website its on, so for the Disney Store when asked for a 8 character password i chose:

Donald, Mickey, Grumpy, Happy, Doc, Pluto, Tinkerbell and Baloo

[Pondlife]

My password is always changed to relate to the website its on, so for the Disney Store when asked for a 8 character password i chose:

Donald, Mickey, Grumpy, Happy, Doc, Pluto, Tinkerbell and Baloo

You don't think the bird plus her seven little mates would be easier to remember.

[SimonMac]

You don't think the bird plus her seven little mates would be easier to remember.

I can't name all seven of them