I told Mike about this thread, but he hasn't responded yet.
Anyway, our resident Google employee is currently locking every account on the MtGox list.
yep, sorry folks
there's no way to know which passwords will get reversed and found to be shared over the next 24 hours or so
this is a standard procedure when faced with password leaks
The fact that gmail, of all places, responded within an hour of mt gox, just goes to show how awesome they are on security.
Anyway, our resident Google employee is currently locking every account on the MtGox list.
The fact that gmail, of all places, responded within an hour of mt gox, just goes to show how awesome they are on security.
Google froze my Gmail account until I revalidated it by SMS. I guess someone is trying the cracked MtGox passwords against the corresponding Gmail accounts. Luckily my passwords are both very strong, and are different.
I just had this happen to my account too.. frozen out of Gmail when trying to login. I had to verify my identity via a SMS.
I told Mike about this thread, but he hasn't responded yet.
Anyway, our resident Google employee is currently locking every account on the MtGox list.
yep, sorry folks
there's no way to know which passwords will get reversed and found to be shared over the next 24 hours or so
this is a standard procedure when faced with password leaks
1. Where'd you download/get this info?
2. Assuming I know my password is one of two things can I figure out what it is using this?
Not sure why but my IP was banned yesterday so I logged in from a different location (worked fine) and changed my password. I'm not sure if my old password or new one is in the data that was stolen. Either one is ~18 characters. Am I pretty safe either way or is it true that these aren't as well salted as mtgox claims?
Lol
You should do that on your GPU farm
Its not in links, its after you directly log in to the site.
Anyway, our resident Google employee is currently locking every account on the MtGox list.
Same here. Good luck cracking my password.
I'll give you a headstart.
Listed salt $1$ZBJdbkqZ$
Listed hash MD/Ln/Ro/cOFIPpWYMHpA.
My password starts with a letter, ends with a number, has a symbol, and more than 15 characters.
If you crack it and post it here I'll send you the remainder of my mtgox funds ($500)
I'll give you a headstart.
Listed salt $1$ZBJdbkqZ$
Listed hash MD/Ln/Ro/cOFIPpWYMHpA.
My password starts with a letter, ends with a number, has a symbol, and more than 15 characters.
If you crack it and post it here I'll send you the remainder of my mtgox funds ($500)
1. Where'd you download/get this info?
2. Assuming I know my password is one of two things can I figure out what it is using this?
Not sure why but my IP was banned yesterday so I logged in from a different location (worked fine) and changed my password. I'm not sure if my old password or new one is in the data that was stolen. Either one is ~18 characters. Am I pretty safe either way or is it true that these aren't as well salted as mtgox claims?
Had received the code and my gmail account is fine.
It can be gmail security for this leak event or just suspicious acticity on the web trying to access my account.
It can be gmail security for this leak event or just suspicious acticity on the web trying to access my account.
got the same. thought i wasnt using the same passwords across sites, i changed them all anyway. just to be safe
Same here. Good luck cracking my password.
I'll give you a headstart.
Listed salt $1$ZBJdbkqZ$
Listed hash MD/Ln/Ro/cOFIPpWYMHpA.
My password starts with a letter, ends with a number, has a symbol, and more than 15 characters.
If you crack it and post it here I'll send you the remainder of my mtgox funds ($500)
I'll give you a headstart.
Listed salt $1$ZBJdbkqZ$
Listed hash MD/Ln/Ro/cOFIPpWYMHpA.
My password starts with a letter, ends with a number, has a symbol, and more than 15 characters.
If you crack it and post it here I'll send you the remainder of my mtgox funds ($500)
But mine was a paypal notice and it was a phishing scam, not from paypal.
They claimed there was unusual activity on my account, but the return address was a spam mail addy.
They claimed there was unusual activity on my account, but the return address was a spam mail addy.
This happened to me too. Maybe Google has seen the compromised email list, and just as a security precaution is making everyone on the list change their password? (My password on Gmail was completely different than on Mt Gox; both were randomly generated.)
I got this message too when trying to log on gmail, but im not receiving any code by the telephone i provided so i just cant access my gmail right now.
My pass was very different from the one i used in MtGox so what could be causing this? Just are some people trying to access my account?
My pass was very different from the one i used in MtGox so what could be causing this? Just are some people trying to access my account?
+1
The suspicious activity list doesn't show any logins from others so people must be trying (and failing) to access my account.
My gmail address was in the leak as well. I use unique passwords for all accounts, luckily.
The suspicious activity list doesn't show any logins from others so people must be trying (and failing) to access my account.
My gmail address was in the leak as well. I use unique passwords for all accounts, luckily.
I got this also, my andriod phone had a warning on it that it failed to sync with Gmail. So I logged in on a browser and lo and behold i had unusual activiy.
So not only has MtGox stolen 47.22 from me on a dwolla transfer on 6/5, they have negligently stored my personal details in an obviously insecure database.
Thank you Mt.Gox. Never doing business with you again.
So not only has MtGox stolen 47.22 from me on a dwolla transfer on 6/5, they have negligently stored my personal details in an obviously insecure database.
Thank you Mt.Gox. Never doing business with you again.
I just posted about this, previously. It happened to my hotmail account once I signed up again for Mt Gox to post something to their massage page. It seems to have happened at the exact same time.
There is no salt with the passwords. Seriously, I rented an Amazon high CPU instance and went crackin' away.
These people deserved their accounts to be hacked, seriously.
These people deserved their accounts to be hacked, seriously.
Lol
You should do that on your GPU farm
gmail may have got wind of the list and tried to protect users on it ?. bit like what facebook did when lulzsec dumped that porn site database
I got a notification of that as well. 
No it's not an email the gmail logs out and you get a seperate page then they have to text you and verify you. Pitty Mt wasn't this good
WARNING, IF THEY TOLD YOU IN EMAIL, THE EMAIL IS FAKE, DO NOT CLICK ON LINKS!
This is just a phishing attempt using your email address.
This is just a phishing attempt using your email address.
Its not in links, its after you directly log in to the site.
There is no salt with the passwords. Seriously, I rented an Amazon high CPU instance and went crackin' away.
These people deserved their accounts to be hacked, seriously.
These people deserved their accounts to be hacked, seriously.
Code:
123456 (fukipuki)
New160611 (New160611)
123456 (christian.fleischhacker@visual)
mkiskin (mkiskin)
123456 (ale4)
uteprv (uteprv)
123456 (nowater)
hello44 (hello44)
123456 (123qaz)
apple (apple)
Derkis (Derkis)
socash (socash)
apple (imac27)
123456 (memset)
apple (haozhou)
123456 (testbug)
frace112 (frace112)
elbio (elbio)
emcor (emcor)
123456 (jojo )
123456 (edgarnumbers)
fordid78 (fordid78)
123456 (sawam)
Jump to: