SIGforum
Have you been PWNED?

This topic can be found at:
https://sigforum.com/eve/forums/a/tpc/f/320601935/m/7190066924

August 30, 2017, 11:26 AM
Pipe Smoker
Have you been PWNED?
"More than 700 million email addresses and a number of passwords have been leaked in what could be the biggest spambot dump ever seen.…

Users of affected accounts are advised to change their passwords as soon as possible to avoid being further compromised. …"

The site below explains more, and has a link that reports whether or not you've been PWNED:

www.dailymail.co.uk/sciencetec...leaked-spammers.html

<PWNED: A variation of the word "owned". The only reason that this word came about was because of a typo, and given that P and O are right next to each other. It has nothing to do with combining words or anything of the sort. It is rumored to have come about from an early Warcraft3 map, in which the creator meant to have a trigger say "PlayerX got ownd", trying to use the "1337speak" variation of "owned", but hit P instead of O, thus giving birth to "pwnd".>

If some perp has only your username, I don't see that as a problem. But if they have your PW too, then they could log in to your email account, change the PW, locking you out of your account. Unfortunately, the site doesn't reveal whether or not they have both.



Serious about crackers
August 30, 2017, 11:43 AM
sigmonkey
I don't trust such benevolence and am not chancing someone harvesting "live" email addresses by entering any of mine in their "search" engine.

I get enough spam.




"the meaning of life, is to give life meaning" Ani Yehudi אני יהודי Le'olam lo shuv לעולם לא שוב!
August 30, 2017, 11:46 AM
Skins2881
This^^^^^!!!!

I'm not punching my info into the address collecting software.



Jesse

Sic Semper Tyrannis
August 30, 2017, 11:53 AM
lkdr1989
Please click on this -->Link to check if your BankEmail account has been compromised.

---------
Suckers Roll Eyes




...let him who has no sword sell his robe and buy one. Luke 22:35-36 NAV

"Behold, I send you out as sheep in the midst of wolves; so be shrewd as serpents and innocent as doves." Matthew 10:16 NASV
August 30, 2017, 04:15 PM
Pipe Smoker
The site asks only for your email address, not your email account PW. Email addresses, sans PW, can scarcely be considered confidential information. Perps can easily get them by the boatload. But I have a PW vault that generates long, strong PWs – a different PW for every account.

One benefit of the site is that it reports where your credentials were obtained from. In my case, it was a "DailyMotion" data breech. I was glad to know that, because I'd never reveal any significant info to such a site. But if my email address had come from a PayPal data breech, I'd've taken immediate action.

My email server, Fastmail.com, has a superb spam filter. And I haven't seen any increase in spam. In fact, I've had no spam at all since using the checker.

Here's an article about the site:

http://www.davidleonard.london...been-pwned/?pdf=9090



Serious about crackers
August 30, 2017, 07:51 PM
Ronin1069
In the past Para has asked that these types of threads not be started. Anything that asks a member to type in their email address to get info is a no-go.


___________________________
All it takes...is all you got.
____________________________
For those who have fought for it, Freedom has a flavor the protected will never know

ΜΟΛΩΝ ΛΑΒΕ
August 30, 2017, 08:12 PM
DSgrouse
I recieved the e-mail yesterday. This sight came to the forefront during the ashley madison scandle a year or so ago. Since then it has alerted me to 2 data breaches, which have allowed me to change the associated passwords. In both cases it was not till a month later that the websites notified me.
August 31, 2017, 10:07 AM
Pipe Smoker
quote:
Originally posted by DSgrouse:
I recieved the e-mail yesterday. This sight came to the forefront during the ashley madison scandle a year or so ago. Since then it has alerted me to 2 data breaches, which have allowed me to change the associated passwords. In both cases it was not till a month later that the websites notified me.

Thanks for the feedback. I requested email notifications of website breeches exposing my credentials yesterday. That'll save the necessity of periodic checks, and will provide more timely warnings. The email notification sign-up process has a prove-that-you're-not-a-robot procedure that's a bit tricky. I had to try a second time.



Serious about crackers