Take action to secure your compromised passwords - Google

[Scorpion Ghost]

Is this just some routine thing that everybody gets, or are they for real?



This bullshit reads like it's personal, like MY actual password was leaked. But I smell bullshit. They just want to push people to "Password Manager" service or some shit. Right?

 

[cerebration]

With these things - better safe than sorry.

 

[IG Professor]

Maybe your pw's got leaked.
You can check here :
https://haveibeenpwned.com/

 

[Nightflyy]

Not really those passwords are actually leaked. You don't have to do anything since they also need to know your email/username

 

[Scorpion Ghost]

Maybe your pw's got leaked.
You can check here :
https://haveibeenpwned.com/

Oh no — pwned!​

Pwned in 2 data breaches and found no pastes

CafePress: In February 2019, the custom merchandise retailer CafePress suffered a data breach. The exposed data included 23 million unique email addresses with some records also containing names, physical addresses, phone numbers and passwords stored as SHA-1 hashes. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised data: Email addresses, Names, Passwords, Phone numbers, Physical addresses

CashCrate: In June 2017, news broke that CashCrate had suffered a data breach exposing 6.8 million records. The breach of the cash-for-surveys site dated back to November 2016 and exposed names, physical addresses, email addresses and passwords stored in plain text for older accounts along with weak MD5 hashes for newer ones.
Compromised data: Email addresses, Names, Passwords, Physical addresses

---

Yeah but, none of these sites had my email password.

Meh.. okay.. fiiiiine... I'll change my password... ugh

 

[Sardi]

I usually ignore them when its a non-important email but the email that signed up here has like 24+ characters or more (I have no idea really) so if google sends me that about my password I say BULLSHIT

 

[LootBox]

Is this just some routine thing that everybody gets, or are they for real?

View attachment 175081

This bullshit reads like it's personal, like MY actual password was leaked. But I smell bullshit. They just want to push people to "Password Manager" service or some shit. Right?

You can always check: https://haveibeenpwned.com/

 

[Sardi]

You can always check: https://haveibeenpwned.com/

what to do if you have been pwned?

 

[Scorpion Ghost]

what to do if you have been pwned?

Yeah, I have the same question.

 

[Sardi]

Yeah, I have the same question.

according to the website

Can a breach be removed against my email address after I've changed the password?​

HIBP provides a record of which breaches an email address has appeared in regardless of whether the password has consequently been changed or not. The fact the email address was in the breach is an immutable historic fact; it cannot later be changed. If you don't want any breach to publicly appear against the address, use the opt-out feature.

change your pass

 

[Jurr]

what to do if you have been pwned?

Yeah, I have the same question.

Change your passwords, nothing much you can do.

 

[693840]

Oh no — pwned!​

Pwned in 2 https://haveibeenpwned.com/FAQs#DataSource and found no https://haveibeenpwned.com/FAQs#Pastes

CafePress: In February 2019, the custom merchandise retailer https://www.cafepress.com/ suffered a data breach. The exposed data included 23 million unique email addresses with some records also containing names, physical addresses, phone numbers and passwords stored as SHA-1 hashes. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised data: Email addresses, Names, Passwords, Phone numbers, Physical addresses

CashCrate: In June 2017, news broke that https://motherboard.vice.com/en_us/article/bj8pvq/hackers-steal-6-million-user-accounts-for-cash-for-surveys-site. The breach of the cash-for-surveys site dated back to November 2016 and exposed names, physical addresses, email addresses and passwords stored in plain text for older accounts along with weak MD5 hashes for newer ones.
Compromised data: Email addresses, Names, Passwords, Physical addresses

---

Yeah but, none of these sites had my email password.

Meh.. okay.. fiiiiine... I'll change my password... ugh

Just add one symbol behind it, or change the last character.

 

[HoNeYBiRD]

Chrome lets you know for a while now, if any of your passwords was leaked in known data breaches (when you enter a compromised password). They just introduced this new presentation of their password checking feature with the latest Chrome version. It seems a bit pushy, but it's not fishy, nothing to worry about. I mean, if you trust Google.

I have passwords saved in Chrome for around 900 non-important sittes, if i run the password checker, my passwords are compromised on something like 1/3rd of the sites, which is fine. There's 2FA enabled on important sites anyway.

 

[Sardi]

Just add one symbol behind it, or change the last character.

so your password must be Blackhatlifter69 ?

 

[Scorpion Ghost]

Yeah but apparently the breach was on some website where I registered a million years ago, and don't use.

CafePress and CashCrate. These sites still exist? I have no idea, I don't care.

I mean, it seems it wasn't my Gmail or anything important that was breached as far as I can see.

So nothing to do then, right..

 

[Jurr]

Yeah but apparently the breach was on some website where I registered a million years ago, and don't use.

CafePress and CashCrate. These sites still exist? I have no idea, I don't care.

I mean, it seems it wasn't my Gmail or anything important that was breached as far as I can see.

So nothing to do then, right..

Yeah, in that case, just forget it. These passwords that got leaked are just for those sites. So if you weren't a dumbass like I was and didn't use the same password everywhere, then just ignore it

 

[Sardi]

Yeah, in that case, just forget it. These passwords that got leaked are just for those sites. So if you weren't a dumbass like I was and didn't use the same password everywhere, then just ignore it

uh shit, guys I need to do something, I will be right back ...

 

[Jurr]

uh shit, guys I need to do something, I will be right back ...

I feel your pain buddy

 

[Scorpion Ghost]

Yeah, in that case, just forget it. These passwords that got leaked are just for those sites. So if you weren't a dumbass like I was and didn't use the same password everywhere, then just ignore it

I use a different password on every site/account i ever make.

Here are some of my passwords

rsg516?4drgfs51!6grs615srgf
aezdg6541@sgde1312srgf
sdf65s#fe51fs1sdfr2f
asfd6854d$s5fsd65f
as65ads51sd%fg312sf
asd654^asd65dsf156sd1gsg
adf654asdf5d&s65f1sd
sdfa5f6d*1g65fs1g6
sdf56sf1(65sdg1fd
gfh6fda1s65f1)65sdg1b

So you smash your keyboard left and right and left and right, and then you insert a few special symbols in there.

That's how you rock

 

[Jurr]

I use a different password on every site/account i ever make.

Here are some of my passwords

rsg516?4drgfs51!6grs615srgf
aezdg6541@sgde1312srgf
sdf65s#fe51fs1sdfr2f
asfd6854d$s5fsd65f
as65ads51sd%fg312sf
asd654^asd65dsf156sd1gsg
adf654asdf5d&s65f1sd
sdfa5f6d*1g65fs1g6
sdf56sf1(65sdg1fd
gfh6fda1s65f1)65sdg1b

So you smash your keyboard left and right and left and right, and then you insert a few special symbols in there.

That's how you rock

Soo... Can I borrow some of your passwords?