[ubuntu-uk] phishing and LinkedIn

[Joe]

I figure if they already have the hash it's theoretically only a matter of time before they crack it.
Using it at least tells you if your password has been cracked (if it is honest about that) and so can help you to determine if there's a chance that someone already has had chance to access your account.

I'd say people should be changing their passwords regardless, so there's no harm in putting in if you're about to change it.

Hope nobody here's been hacked,
Joe
Sent via BlackBerry® from Orange

-----Original Message-----
From: Jon Spriggs <jon at sprig.gs>
Sender: ubuntu-uk-bounces at lists.ubuntu.com
Date: Thu, 7 Jun 2012 11:28:15 
To: UK Ubuntu Talk<ubuntu-uk at lists.ubuntu.com>
Reply-To: UK Ubuntu Talk <ubuntu-uk at lists.ubuntu.com>
Cc: <lubuntu-users at lists.ubuntu.com>
Subject: Re: [ubuntu-uk] phishing and LinkedIn

Bear in mind the key here is to decrypt the hashes which are
publically circulating. If you give them a password to hash for you,
then they can then search for that hash and get a list of everyone
who's used that password. Even if it's just one person, that's one
password less they need to put through a rainbow table of hashes.

All the best,
--
Jon "The Nice Guy" Spriggs


On 7 June 2012 10:36, Steve Flynn <anothermindbomb at gmail.com> wrote:
> On 7 June 2012 03:29, Phill Whiteside <PhillW at ubuntu.com> wrote:
>
>>
>> Anyways, don't go near the phishing site.... http://www.leakedin.org/
>> Except for a giggle :)
>>
>> What a wally!
>
> Not much of a phishing site if it doesn't have any means of collating
> your login name...
>
> --
> Steve
>
> When one person suffers from a delusion it is insanity. When many
> people suffer from a delusion it is called religion.
>
> --
> ubuntu-uk at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
> https://wiki.ubuntu.com/UKTeam/

-- 
ubuntu-uk at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk
https://wiki.ubuntu.com/UKTeam/