I do not have to tell you to change your passwords, right?

peet · Post by **peet** » Thu Jan 17, 2019 1:46 pm

https://www.troyhunt.com/the-773-millio ... ata-reach/

No I do not have to tell you guys again to change your passwords...

Broodwich · Post by **Broodwich** » Thu Jan 17, 2019 6:10 pm

2fa ftw

Post by **pkk** » Thu Jan 17, 2019 7:33 pm

Broodwich wrote:QUOTE (Broodwich @ Jan 17 2019, 07:10 PM) 2fa ftw

https://github.com/kgretzky/evilginx2

https://vimeo.com/281220095

Broodwich · Post by **Broodwich** » Thu Jan 17, 2019 11:25 pm

You still have to click on a bad link to get hijacked... which is how every other piece of malware/phishing works. I was referring to an attacker being able to get into your accounts from this email/password dump

Interesting video though

peet · Post by **peet** » Fri Jan 18, 2019 7:40 am

Once a year the great people of the Chaos Computer Club have a 4 day conference, which gives me a good sense about the current of (in)secure things. It gives me great pleasure at least one European country actually cares about privacy.

I can recommend viewing some lectures, a lot are in English or translated to English.

Post by **pkk** » Fri Jan 25, 2019 6:53 pm

Much nicer than SpyCloud and HaveIbeenpwned, because it provides some more information:
https://sec.hpi.de/ilc/?lang=en

Broodwich · Post by **Broodwich** » Fri Jan 25, 2019 6:59 pm

Nifty

Terran · Post by **Terran** » Sat Jan 26, 2019 12:45 am

pkk wrote:QUOTE (pkk @ Jan 25 2019, 01:53 PM) Much nicer than SpyCloud and HaveIbeenpwned, because it provides some more information:
https://sec.hpi.de/ilc/?lang=en

how cool would it be if that site was actually ran by criminals looking for email addresses to target?

peet · Post by **peet** » Thu Jan 31, 2019 2:35 pm

https://www.wired.com/story/collection- ... -billions/

It seems there is also new account data in this new batch, added to the old known data.