Data leak includes passwords for this site.
- Thread starter loneryder
- Start date
- Status
It's probably related to password reuse. They can tell from the hashes whether the same password is being used on multiple sites. I think it has less to do with BITOG being compromised and more to do with not using a unique password for each site.
Use a password manager and generate your passwords, every site is different. I use 1Password
I have found that Apple thing to be incorrect. Not precise. It mostly goes by password simplicity and comparison to use at other sites and use by others. A good reminder, but not accurate.
JHZR2
Staff member
I looked at it on mine. Apple says the password has appeared in a data leak. It doesn’t say what data leak, and IIRC, someplace it said that this means the password itself was found but not necessarily in conjunction with the username or site.
We should have @wwillson weigh in, and avoid speculation until he gives the actual scoop…
We should have @wwillson weigh in, and avoid speculation until he gives the actual scoop…
I just looked at mine. Bob is not listed.
Amazon and a few others that make me suspect .gov hacks….
Amazon and a few others that make me suspect .gov hacks….
This ^^^^
I haven’t been notified about my BITOG password but apple has gave me that warning with other sites that I may have used the same or similar password.
Remember to turn on 2FA for everything possible too
OVERKILL
$100 Site Donor 2021
Yup, which this site has supported for a long time now.
This is the service/database that all the "your password has been leaked" services use to report the information. If you want to try it directly yourself.
haveibeenpwned.com
That website form and the various reporting tools use https://en.wikipedia.org/wiki/K-anonymity to never actually transmit your password over the internet, even in encrypted form.
Have I Been Pwned: Pwned Passwords
Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.
That website form and the various reporting tools use https://en.wikipedia.org/wiki/K-anonymity to never actually transmit your password over the internet, even in encrypted form.
This forum has a feature where if you post your password, it replaces it with all asterisk and reports if its safe or not, here I'll go
************************* [CONFIRMED SAFE]
Wow, works pretty good
************************* [CONFIRMED SAFE]
Wow, works pretty good
ATT sent me a stating they did not
ATT sent me a letter stating my data had been leaked but that they did not think any financially important info had been leaked. The next day I got an alert stating my SS# as well as my email and phone number were found on the dark web associated with the ATT leak. I always have freezes on my credit reports anyway but I also placed an additional warning to verify my identity before issuing credit.
I'd advise you to freeze your credit, if you haven't already. See:
:max_bytes(150000):strip_icc()/credit-card-with-icicles-illustrates-a-credit-freeze-635671076-97fbf0ae9e6148b7a4c936c1f9d5ba47.jpg)
www.investopedia.com
Should You Freeze Your Credit?
A credit freeze can help protect against identity theft. Learn how to freeze and unfreeze your credit reports.
- Status
Similar threads
