Collection #1 is the world's biggest data dump. Check your passwords - Page 1
Forum section: electronics / general

author: Zucca
author_rank: Unknown
timestamp: January 18, 2019, 11:36:53 am
content: https://www.wired.co.uk/article/collection-1-have-i-been-pwnedmy @gmail.com email seems to be compromised, but this week-end I am leaving Gmail for good.

author: oPossum
author_rank: Super Contributor
timestamp: January 18, 2019, 02:00:46 pm
content: "773M Password ‘Megabreach’ is Years Old"https://krebsonsecurity.com/2019/01/773m-password-megabreach-is-years-old/

author: Red Squirrel
author_rank: Super Contributor
timestamp: January 18, 2019, 09:29:47 pm
content: I got an email that I got compromised. All this is super vague though, which site got compromised? I recently went around changing ALL my passwords and now I have to do it all over again, hoping to narrow it down to a few sites instead. I use a password manager and pretty much use randomly generated passwords for most things now.

author: donotdespisethesnake
author_rank: Super Contributor
timestamp: January 19, 2019, 08:02:06 am
content: If your email is on the compromised list, it means the combo of username/email/password for a particular site was compromised. As long as you don't use the same password as your email for any other site your email account will be ok.

author: Red Squirrel
author_rank: Super Contributor
timestamp: January 19, 2019, 02:16:12 pm
content: Yeah I run my own mail server so hopefully it's not hacked. Probably going to change those passwords again for good measure though. Email and domain registrar are the most critical things to protect. For domain registrar I use 2 factor auth too.

author: Halcyon
author_rank: Unknown
timestamp: January 20, 2019, 12:02:09 am
content: Breaches will happen. I've said this time and time again and I'll keep saying it until users listen:Don't recycle passwords and don't use one service to sign into another- i.e.: Don't use your Facebook login to sign in to an online store. Using something like Keepass is easy and quick. It sure beats having to go and change all your passwords because you were silly enough to use the same one for everything.

author: Red Squirrel
author_rank: Super Contributor
timestamp: January 20, 2019, 12:51:12 am
content: With this particular breach you still have to change your passwords everywhere though, as there's no details on WHAT was breached. I guess that's where using a unique email for each service would be ideal.

author: s8548a
author_rank: Regular Contributor
timestamp: January 20, 2019, 07:18:05 am
content: Ya, my gmail and yahoo id's were on the pawned list and upon checking the breaches, it makes clear that the websites/services to which I am subscribed using these email id's got compromised.as I am using different passwords for each I think the mail id's are safe, but I can see the increase in the spam and marketing email bullshit.

author: Fred27
author_rank: Unknown
timestamp: January 20, 2019, 07:39:46 am
content: Quote from: zucca on January 18, 2019, 11:36:53 amYou know that this has nothing to do with gmail, don't you? Gmail hasn't been compromised. A site where you used your gmail address as your username had been.

author: Halcyon
author_rank: Unknown
timestamp: January 20, 2019, 08:23:00 am
content: Quote from: Red Squirrel on January 20, 2019, 12:51:12 amYou can still check which service(s) of yours have been compromised by entering your email address inhttps://haveibeenpwned.comThey have uploaded over 772 million email addresses/user accounts involved in the breach into their database.

author: Red Squirrel
author_rank: Super Contributor
timestamp: January 21, 2019, 02:48:18 pm
content: Quote from: Halcyon on January 20, 2019, 08:23:00 amBut if you use the same email for each service as I do it won't really narrow down much. I guess that's where using 1 email per service would be ideal.

author: schmitt trigger
author_rank: Super Contributor
timestamp: January 21, 2019, 02:56:01 pm
content: That is one of the reasons to use a two-factor authentication on important online accounts.While not 100% perfect, it does add another security layer.

author: Bud
author_rank: Super Contributor
timestamp: January 21, 2019, 03:04:40 pm
content: Quote from: Halcyon on January 20, 2019, 08:23:00 amOut of curiousity i entered my email which i had not used for the last 15 years and the check came out with a bunch of services which i never used, and i thonk none of them existed back then. So the list of compromised services appear to be BS.

author: ebastler
author_rank: Super Contributor
timestamp: January 21, 2019, 03:35:27 pm
content: Quote from: Bud on January 21, 2019, 03:04:40 pmIs that really you, Bud??For all we know, the real Bud might be an exceedingly mild-mannered and charming individual, but his eevblog account has been pwned years ago...