Russian gang has stolen 1.2B(!) passwords: security researchers - Polidicks

[url]http://www.usatoday.com/story/tech/personal/2014/08/05/russian-gang-stolen-passwords/13639285/[/url] [quote=USA Today]Security researchers say a Russian crime ring has pulled off the largest known theft of confidential Internet information including 1.2 billion username and password combinations and more than 500 million email addresses. The cyber gang injected malicious code to steal databases from at least 420,000 websites, says Alex Holden, founder and chief information security officer for Hold Security in Milwaukee, Wisc. "It is absolutely the largest breach we've ever encountered," Holden said Tuesday. Most unsettling, he said, was finding his own credentials among the compromised data.[/quote]

Does that mean there will be even more shittalking Russian Dota players?

So um, should I change all my passwords?

Is there a list to see if our data is compromised?

[QUOTE=Lyonidis;45603758]Is there a list to see if our data is compromised?[/QUOTE] [quote]The cyber gang injected malicious code to steal databases from at least 420,000 websites[/quote] If this isn't some kind of a fud, then it's probably pretty much [I]everything[/I]

is my neopets account safe

[QUOTE=sa2fan;45603737]So um, should I change all my passwords?[/QUOTE] Never hurts to do so. Also turn on two-factor authentication anywhere you can.

I think I might have witnessed the effects of this, I got a email that was supposedly from Paypal, it displayed no email address and told me that they had made changes that I needed to review. I hovered the link in the mail and it led to some site called startup(dot)ru/hack. I then went to block the sender, to which it asked me if I wanted to block mails from my own address. Creepy stuff, promptly changed password.

[img]http://www.gannett-cdn.com/-mm-/a88009be0d594a636fc256446b689251006b993a/c=81-0-3678-2707&r=x404&c=534x401/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032002-465465797.jpg[/img] These are getting ridiculous.

£5 they hit weak job application websites, people use secure passwords there but the security is lax as hell

[quote]Security expert Phil Lieberman, CEO of Lieberman Software thinks the theft may be more of a warning or a veiled threat from the Russians. [b]"I think this is a political statement rather than a security threat,"[/b] he said. "I think there is a message being sent and the message is: Watch out." The Russian government could have prevented the breach, he says. "But then the question is: Why should they? Are we such good friends that they should stop this?"[/quote] Interesting angle to say the least.

[QUOTE=valiant1k;45603870][IMG]http://www.gannett-cdn.com/-mm-/a88009be0d594a636fc256446b689251006b993a/c=81-0-3678-2707&r=x404&c=534x401/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032002-465465797.jpg[/IMG] These are getting ridiculous.[/QUOTE] [IMG]http://www.gannett-cdn.com/-mm-/32088fb9b82c0b33b75564a53d42f6e9330a976c/c=224-0-3650-2575&r=x383&c=540x380/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032000-491893117.jpg[/IMG] Shit, I didn't know you needed a magnifying glass to hack computers. Now I understand. It makes perfect sense.

You better not cheeki breeki my account

[QUOTE=valiant1k;45603870][img]http://www.gannett-cdn.com/-mm-/a88009be0d594a636fc256446b689251006b993a/c=81-0-3678-2707&r=x404&c=534x401/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032002-465465797.jpg[/img] These are getting ridiculous.[/QUOTE] [img]http://i.imgur.com/zA4zDES.jpg[/img]

[QUOTE=l337k1ll4;45603997][IMG]http://www.gannett-cdn.com/-mm-/32088fb9b82c0b33b75564a53d42f6e9330a976c/c=224-0-3650-2575&r=x383&c=540x380/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032000-491893117.jpg[/IMG] Shit, I didn't know you needed a magnifying glass to hack computers. Now I understand. It makes perfect sense.[/QUOTE] he's not wearing gloves, he's going to leave DNA evidence in their system

[QUOTE=l337k1ll4;45603997][IMG]http://www.gannett-cdn.com/-mm-/32088fb9b82c0b33b75564a53d42f6e9330a976c/c=224-0-3650-2575&r=x383&c=540x380/local/-/media/USATODAY/GenericImages/2014/08/05/1407279032000-491893117.jpg[/IMG] Shit, I didn't know you needed a magnifying glass to hack computers. Now I understand. It makes perfect sense.[/QUOTE] Hurray! Let's make this a thread for generic stock images of hackerz. [IMG]http://31.media.tumblr.com/tumblr_lwap2iVkPR1r5c8qzo1_400.jpg[/IMG]

Aw for fuck sakes.. Guess it's time to change EVERYTHING.

Can we at least have a list/ database of websites affected? It would be useful to know which passwords we really need to change.

[QUOTE=Marik Bentusi;45603921]Interesting angle to say the least.[/QUOTE] Yeah I dont think so. I was talking with a friend and we think its probably just a vbulletin or other forum software exploit and too many people just use the same passwords for their emails.

[QUOTE=Jamsponge;45604148]Can we at least have a list/ database of websites affected? It would be useful to know which passwords we really need to change.[/QUOTE] FP is probably not affected. I never heard about FP until [editline]5th August 2014[/editline] mah automerge

[quote]Most unsettling, he said, was finding his own credentials among the compromised data.[/quote] That's splendid for him but what about the rest of us that may be affected? I don't really want to have to change my passwords everywhere, especially if it may be unnecessary.

[b]DAMN YOU PUTIN!!!![/b]

Seems pretty obvious to me that the concept of the password is now obsolete. Go ahead and set your passwords to "12345" now folks, your account's going to be compromised just as soon either way [editline]5th August 2014[/editline] more sites need two-factor auth of some sort

[QUOTE=Jamsponge;45604148]Can we at least have a list/ database of websites affected? It would be useful to know which passwords we really need to change.[/QUOTE] It would be difficult to compile a list if this attack is as big as they are making it out to be. It might take weeks or even months to sift through it all and by that time these criminals will already have made their money thousands of times over. The more likely outcome will be individual sites that have been breached coming forth detailing it to their users/customers. If this breach is indeed legitimate and not something blown of of proportion then every major website is currently scrambling their staff to look in to this issue. I really do hope it's not this big because that would cause massive ramifications and would bring back the general wariness to the lack of security on the internet.

[QUOTE=cqbcat;45604107]Hurray! Let's make this a thread for generic stock images of hackerz. [IMG]http://31.media.tumblr.com/tumblr_lwap2iVkPR1r5c8qzo1_400.jpg[/IMG][/QUOTE] ok [IMG]http://nanobitwallpaper.com/wp-content/uploads/2014/07/computer-hacker-stock-photo.jpg[/IMG]

[QUOTE=sa2fan;45603737]So um, should I change all my passwords?[/QUOTE] At the very least, change your e-mail passwords.

Is gmail safe? I feel like if it was compromised it would be much bigger news.

damn, they quite literally hacked the world.

Eh. Nothing is safe/unhackable. I'll probably change my passwords, but I'm not going to lose sleep over something like this.

Out of a billion passwords what are the chances they'll pick your password and account. Nothing will happen