[Cialug] Change your password on gawker sites

[Kenneth Younger]

Yes, I keep seeing it mentioned that it's on torrent sites, but I can't seem
to find it at all. I'm more curious what my password was on that site than I
am about changing it. It was so long ago (and I don't comment on their sites
anymore) that I can't remember it and it's not in my LastPass vault.

If anyone does run across it, I would be interested in knowing what password
I used. Feel free to email me and let me know.

Or go put some wacky off the wall comments on some Gawker post, then let me
know.

-Kenny

On Mon, Dec 13, 2010 at 10:57 AM, Josh More
<MoreJ at alliancetechnologies.net>wrote:

>  You can check if your account was compromised here:
> http://www.google.com/fusiontables/DataSource?dsrcid=350662
>
> Just do a search on the MD5 of your email address, instructions are in the
> right column of the spreadsheet.
>
> I'm still looking for the raw dump of the stolen data so I can analyze it.
>
>       Josh More | Senior Security Consultant - CISSP, GIAC-GSLC, GIAC-GCIH
> Alliance Technologies | www.AllianceTechnologies.net<http://www.alliancetechnologies.net>
> 400 Locust St., Suite 840 | Des Moines, IA 50309
> 515.245.7701 | 888.387.5670 x7701
>
> Santa is Secure.  Are you?
> http://www.alliancetechnologies.net/security/santa-2010
>
> How are we doing? Let us know here:
>
> http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey
>
>         ------------------------------
> *From:* cialug-bounces at cialug.org [cialug-bounces at cialug.org] on behalf of
> Matthew Nuzum [newz at bearfruit.org]
> *Sent:* Monday, December 13, 2010 09:13
> *To:* Central Iowa Linux Users Group
> *Subject:* [Cialug] Change your password on gawker sites
>
>  Hi, if you use lifehacker, gizmodo or one of the other gawker websites
> your password may have been compromised (along with 1.5M others)
>
>  While initially denying the attack, Gawker has issued an apology to its
>> users on all of its sites, urging them to change their passwords because of
>> the attack. [1] If you have ever commented on any of the Gawker sites, we
>> recommend that you go and change your password.
>
>
>
> http://www.digitaltrends.com/computing/gawker-hacked-1-5-million-accounts-compromised/
>
>
>  [1] http://lifehacker.com/5712785/
>
>   *1) How do I know if my password was hacked?*
> If you've registered an account on any Gawker Media web site (that includes
> Gawker, Gizmodo, Jalopnik, Jezebel, Kotaku, Lifehacker, Deadspin, io9, or
> Fleshbot), and you didn't log in using Facebook Connect, then it's best to
> assume that your username and password were included among the leaked data.
>
> Passwords in our database are encrypted (i.e., not stored in plain text),
> but they're still potentially vulnerable to hackers. You should immediately
> change the password on your account, and if you used that password on any
> other web site, you should change your passwords on all of those accounts<http://lifehacker.com/5712785/#4> as
> well.
>
> *2) What if I logged in using Facebook Connect? Was my password
> compromised?*
> No. We never stored passwords of users who logged in using Facebook
> Connect.
>
>  --
> Matthew Nuzum
> newz2000 on freenode, skype, linkedin, identi.ca and twitter
>
> "An investment in knowledge pays the best interest." -Benjamin Franklin
>
>
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
>
>


-- 
Kenneth Younger III
Founder, Sheer Focus Inc.
Organizer, WordCamp Iowa
e: kenny at sheerfocus.com
p: (515) 367-0001
t: @kenny <http://twitter.com/kenny>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cialug.org/pipermail/cialug/attachments/20101213/6910d488/attachment.htm