1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

If your amazon password is over 8 characters change it!

Discussion in 'BlackHat Lounge' started by social engineer, Jan 29, 2011.

  1. social engineer

    social engineer Regular Member

    Joined:
    Mar 30, 2010
    Messages:
    230
    Likes Received:
    148
    Location:
    UK
    If your amazon password is over 8 characters change it!

    this was taken from a russian black hat hacking forums news page

    I dont know if its fixed but i would update your password anyway

     
  2. Kickflip

    Kickflip BANNED BANNED

    Joined:
    Jan 29, 2010
    Messages:
    2,038
    Likes Received:
    2,465
    But if your password is under 8 characters, arent you at even greater risk? Or I am completely misunderstanding? They still have to guess the first 8 characters don't they? I really consider this a non-issue until someone better explains what is the worry.
     
  3. Jared255

    Jared255 Jr. Executive VIP Jr. VIP Premium Member

    Joined:
    May 10, 2009
    Messages:
    1,907
    Likes Received:
    1,663
    Location:
    Boston, MA
    If this is true, changing your password to under 8 characters wouldn't make it any more secure.
     
  4. glew

    glew Junior Member

    Joined:
    Feb 10, 2008
    Messages:
    141
    Likes Received:
    93
    This what I found
    This example does not include symbols or take into account upper and lower case characters.

    1.) How does this make any sense?

    2.) Didn't work on my account

    3.) I'll keep my password as is thank you very much!

    4.) As i said before, "This makes no sense!"
     
  5. Chees

    Chees Regular Member

    Joined:
    Apr 16, 2010
    Messages:
    476
    Likes Received:
    151
    Thats completely wrong
    1. they aren't guessing the password letter by letter - thats not the way
    2. the author is talking about the algorythm having changed because the passwords are too old and it has changed in a way that if your password is more than 8 chars is vulnerable to the exploit
    3. if someone were to "hack" the passwords they would have to break into the database, take the encrypted passwords and start decrypting them, but just breaking into it in the first place requires huge resources since Amazon is a big company and has them, so I doubt anyone would even bother doing it at also taking the whole risk