[Chapter-delegates] [DNB] LinkedIn investigating reports that 6.46 million hashed passwords have leaked online (fwd)

[Lucy Lynch]

All -

For those linkedin users out there (and you know who you are) -
Please take a minute to login and change your password to something
long, easy to remember, and secure (see below) -

https://xkcd.com/936/

Thanks -

Lucy Lynch
Trust and Identity Initiatives
Internet Society (ISOC )

---------- Forwarded message ----------
Date: Wed, 06 Jun 2012 16:51:42 +0100
From: Ian Cook <ian at cymru.com>
To: ians_dragon_newsbytes at lists.cymru.com
Subject: [DNB] LinkedIn investigating reports that 6.46 million hashed 
passwords
      have leaked online

Title: LinkedIn investigating reports that 6.46 million hashed
passwords have leaked online
Author: Aaron Souppouris
Source: The Verge
Date Published: 6th June 2012

Excerpt:

'....A user in a Russian forum is claiming to have hacked LinkedIn
to the tune of almost 6.5 million account details. The user uploaded
6,458,020 hashed passwords, but no usernames. It's not clear if they
managed to download the usernames, but it's likely that both have
been downloaded.There is a possibility that this could be a hoax,
but several people have said on Twitter that they found their real
LinkedIn passwords as hashes on the list. Many of the hashes include
"linkedin," which seems to add credence to the claims.

We spoke with Mikko Hypponen, Chief Research Officer at F-Secure,
who thinks this is "a real collection." He told us he is "guessing
it's some sort of exploit on their web interface, but there's no way
to know. I am sure sure LinkedIn will fill us in sooner or later.".....'

To read the complete article see:
http://www.theverge.com/2012/6/6/3067523/linkedin-password-leak-online


The opinions expressed in the posted news items do not necessarily
reflect the views of Team Cymru.

The appearance of hyperlinks does not constitute endorsement
by Team Cymru of an external Web site, or any commercial
company, information, products or services contained therein.

Dragon News Bytes is a Private and Restricted mailing
list.

The information transmitted is intended only for the person or
entity to which it is addressed and any retransmission or
dissemination is prohibited.

To subscribe to this mailing list, please signup at:
https://lists.cymru.com/mailman/listinfo/ians_dragon_newsbytes
and then send an email to: outreach at cymru.com
providing some personal background.


        _       //` `\
      _,-"\%   // /``\`\
~^~ >__^  |% // /  } `\`\    Team Cymru
        )  )%// / }  } }`\`\  Dragon News Bytes
       /  (%/`/.\_/\_/\_/\`/
      (    `         `-._`
       \   ,     (  \   _`-.__.- %>
      /_`\ \      `\ \." `-..- `
     ``` /_/`"-=-``/_/
         ```       ```

For more Security News see:
www.team-cymru.org/News
www.team-cymru.org/News/secnews.rss
http://twitter.com/teamcymru

There are many way to keep up with what Team Cymru are doing:
* Join our announce list via cymru-announce-subscribe at cymru.com
* Join our printed newsletter list via quarterly at cymru.com
* See what we see, www.team-cymru.org/Monitoring/Graphs
* Cool stuff you can use: www.team-cymru.org/Services/
* Team Cymru's YouTube Channel: www.youtube.com/teamcymru


_____________________________________________________

Ian Cook
Security Evangelist
Team Cymru
http://www.team-cymru.org/About/contact.html
http://uk.linkedin.com/in/ianccook

'To communicate simply you must understand profoundly'
_______________________________________________
Staff mailing list
Staff at elists.isoc.org
https://elists.isoc.org/mailman/listinfo/staff