<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font face="Helvetica, Arial, sans-serif">Thank you, Lucy. <br>
      <br>
      And in case some of you have used the same password somewhere
      else, make sure you change that one, too. If you cannot remember
      all different passwords / logins, try using some software, like
      1password (unless it also has issues - Marcin, others?). More
      here: </font><a
      href="http://mashable.com/2012/06/06/linkedin-password-check/">http://mashable.com/2012/06/06/linkedin-password-check/</a><br>
    <font face="Helvetica, Arial, sans-serif"><br>
      veni<br>
    </font><br>
    On 06/06/2012 18:58, Lucy Lynch wrote:
    <blockquote
      cite="mid:alpine.BSF.2.00.1206061557290.85783@hiroshima.bogus.com"
      type="cite">All -
      <br>
      <br>
      For those linkedin users out there (and you know who you are) -
      <br>
      Please take a minute to login and change your password to
      something
      <br>
      long, easy to remember, and secure (see below) -
      <br>
      <br>
      <a class="moz-txt-link-freetext" href="https://xkcd.com/936/">https://xkcd.com/936/</a>
      <br>
      <br>
      Thanks -
      <br>
      <br>
      Lucy Lynch
      <br>
      Trust and Identity Initiatives
      <br>
      Internet Society (ISOC )
      <br>
      <br>
      ---------- Forwarded message ----------
      <br>
      Date: Wed, 06 Jun 2012 16:51:42 +0100
      <br>
      From: Ian Cook <a class="moz-txt-link-rfc2396E" href="mailto:ian@cymru.com"><ian@cymru.com></a>
      <br>
      To: <a class="moz-txt-link-abbreviated" href="mailto:ians_dragon_newsbytes@lists.cymru.com">ians_dragon_newsbytes@lists.cymru.com</a>
      <br>
      Subject: [DNB] LinkedIn investigating reports that 6.46 million
      hashed passwords
      <br>
           have leaked online
      <br>
      <br>
      Title: LinkedIn investigating reports that 6.46 million hashed
      <br>
      passwords have leaked online
      <br>
      Author: Aaron Souppouris
      <br>
      Source: The Verge
      <br>
      Date Published: 6th June 2012
      <br>
      <br>
      Excerpt:
      <br>
      <br>
      '....A user in a Russian forum is claiming to have hacked LinkedIn
      <br>
      to the tune of almost 6.5 million account details. The user
      uploaded
      <br>
      6,458,020 hashed passwords, but no usernames. It's not clear if
      they
      <br>
      managed to download the usernames, but it's likely that both have
      <br>
      been downloaded.There is a possibility that this could be a hoax,
      <br>
      but several people have said on Twitter that they found their real
      <br>
      LinkedIn passwords as hashes on the list. Many of the hashes
      include
      <br>
      "linkedin," which seems to add credence to the claims.
      <br>
      <br>
      We spoke with Mikko Hypponen, Chief Research Officer at F-Secure,
      <br>
      who thinks this is "a real collection." He told us he is "guessing
      <br>
      it's some sort of exploit on their web interface, but there's no
      way
      <br>
      to know. I am sure sure LinkedIn will fill us in sooner or
      later.".....'
      <br>
      <br>
      To read the complete article see:
      <br>
<a class="moz-txt-link-freetext" href="http://www.theverge.com/2012/6/6/3067523/linkedin-password-leak-online">http://www.theverge.com/2012/6/6/3067523/linkedin-password-leak-online</a>
      <br>
      <br>
      <br>
      The opinions expressed in the posted news items do not necessarily
      <br>
      reflect the views of Team Cymru.
      <br>
      <br>
      The appearance of hyperlinks does not constitute endorsement
      <br>
      by Team Cymru of an external Web site, or any commercial
      <br>
      company, information, products or services contained therein.
      <br>
      <br>
      Dragon News Bytes is a Private and Restricted mailing
      <br>
      list.
      <br>
      <br>
      The information transmitted is intended only for the person or
      <br>
      entity to which it is addressed and any retransmission or
      <br>
      dissemination is prohibited.
      <br>
      <br>
      To subscribe to this mailing list, please signup at:
      <br>
      <a class="moz-txt-link-freetext" href="https://lists.cymru.com/mailman/listinfo/ians_dragon_newsbytes">https://lists.cymru.com/mailman/listinfo/ians_dragon_newsbytes</a>
      <br>
      and then send an email to: <a class="moz-txt-link-abbreviated" href="mailto:outreach@cymru.com">outreach@cymru.com</a>
      <br>
      providing some personal background.
      <br>
      <br>
      <br>
             _       //` `\
      <br>
           _,-"\%   // /``\`\
      <br>
      ~^~ >__^  |% // /  } `\`\    Team Cymru
      <br>
             )  )%// / }  } }`\`\  Dragon News Bytes
      <br>
            /  (%/`/.\_/\_/\_/\`/
      <br>
           (    `         `-._`
      <br>
            \   ,     (  \   _`-.__.- %>
      <br>
           /_`\ \      `\ \." `-..- `
      <br>
          ``` /_/`"-=-``/_/
      <br>
              ```       ```
      <br>
      <br>
      For more Security News see:
      <br>
      <a class="moz-txt-link-abbreviated" href="http://www.team-cymru.org/News">www.team-cymru.org/News</a>
      <br>
      <a class="moz-txt-link-abbreviated" href="http://www.team-cymru.org/News/secnews.rss">www.team-cymru.org/News/secnews.rss</a>
      <br>
      <a class="moz-txt-link-freetext" href="http://twitter.com/teamcymru">http://twitter.com/teamcymru</a>
      <br>
      <br>
      There are many way to keep up with what Team Cymru are doing:
      <br>
      * Join our announce list via <a class="moz-txt-link-abbreviated" href="mailto:cymru-announce-subscribe@cymru.com">cymru-announce-subscribe@cymru.com</a>
      <br>
      * Join our printed newsletter list via <a class="moz-txt-link-abbreviated" href="mailto:quarterly@cymru.com">quarterly@cymru.com</a>
      <br>
      * See what we see, <a class="moz-txt-link-abbreviated" href="http://www.team-cymru.org/Monitoring/Graphs">www.team-cymru.org/Monitoring/Graphs</a>
      <br>
      * Cool stuff you can use: <a class="moz-txt-link-abbreviated" href="http://www.team-cymru.org/Services/">www.team-cymru.org/Services/</a>
      <br>
      * Team Cymru's YouTube Channel: <a class="moz-txt-link-abbreviated" href="http://www.youtube.com/teamcymru">www.youtube.com/teamcymru</a>
      <br>
      <br>
      <br>
      _____________________________________________________
      <br>
      <br>
      Ian Cook
      <br>
      Security Evangelist
      <br>
      Team Cymru
      <br>
      <a class="moz-txt-link-freetext" href="http://www.team-cymru.org/About/contact.html">http://www.team-cymru.org/About/contact.html</a>
      <br>
      <a class="moz-txt-link-freetext" href="http://uk.linkedin.com/in/ianccook">http://uk.linkedin.com/in/ianccook</a>
      <br>
      <br>
      'To communicate simply you must understand profoundly'
      <br>
      _______________________________________________
      <br>
      Staff mailing list
      <br>
      <a class="moz-txt-link-abbreviated" href="mailto:Staff@elists.isoc.org">Staff@elists.isoc.org</a>
      <br>
      <a class="moz-txt-link-freetext" href="https://elists.isoc.org/mailman/listinfo/staff">https://elists.isoc.org/mailman/listinfo/staff</a>
      <br>
      _______________________________________________
      <br>
      Chapter-delegates mailing list
      <br>
      <a class="moz-txt-link-abbreviated" href="mailto:Chapter-delegates@elists.isoc.org">Chapter-delegates@elists.isoc.org</a>
      <br>
      <a class="moz-txt-link-freetext" href="https://elists.isoc.org/mailman/listinfo/chapter-delegates">https://elists.isoc.org/mailman/listinfo/chapter-delegates</a>
      <br>
      <br>
    </blockquote>
  </body>
</html>