Thousands of miners mail accounts + plain text password leaked!

repentance

hero member

Activity: 868

Merit: 1000

Quote from: dust on September 23, 2011, 02:10:22 AM

Link is dead now. Anyone know which pools this info is from?

Nofeemining.

The other thread is only three pages long if you want to know more about it. It's part of their old database.

https://bitcointalksearch.org/topic/m.539852

Given that the files themselves were from July and the many good reasons for people to have changed their passwords around that time, it's insane if those passwords are still valid for anyone's email or exchange accounts (and judging by the other thread, at least some of them are still valid for email accounts).

dust

hero member

Activity: 840

Merit: 1000

Link is dead now. Anyone know which pools this info is from?

sadpandatech

hero member

Activity: 504

Merit: 500

Well, no offense to anyone that does not know any better, butttttttttttt.. Anyone who uses the same email, username, password or any combination of the 3 on more than one thing online these days is fuggin retarded.......

greyhawk

hero member

Activity: 952

Merit: 1009

Quote from: flower1024 on September 22, 2011, 09:57:08 AM

Quote from: giszmo on September 22, 2011, 06:21:52 AM

Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?

please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

i can handle spam....

Which one is it?

hollajandro

member

Activity: 83

Merit: 10

Since miner passwords are sent in plaintext every time your miner connects to a pool, I'd say anyone using this password anywhere else almost deserves it.

giszmo

legendary

Activity: 1862

Merit: 1114

WalletScrutiny.com

Quote from: flower1024 on September 22, 2011, 09:57:08 AM

please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

*sigh* ... google can definitely check if your password leaked or not from that list. In case it did and only then should they lock down your account for reactivation via date of birth, sms or whatever ...

Ayo_4_Yayo

newbie

Activity: 42

Merit: 0

All this talk of leaks means someone left the water running, think of the waste.

flower1024

legendary

Activity: 1428

Merit: 1000

Quote from: giszmo on September 22, 2011, 06:21:52 AM

Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?

please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

i can handle spam....

Serge

legendary

Activity: 1050

Merit: 1000

if someone wants my worker password, to mine bitcoins for me, just ask =)

giszmo

legendary

Activity: 1862

Merit: 1114

WalletScrutiny.com

Quote from: fcmatt on September 22, 2011, 08:12:09 AM

What pool is the info from and how did the op get it?

No idea which pool it was. Those affected will know.
I got the link from the other thread. Apparently this document is in google's search index.

fcmatt

legendary

Activity: 2072

Merit: 1001

Quote from: Cryptoman on September 22, 2011, 08:08:44 AM

Quote from: fcmatt on September 22, 2011, 08:06:06 AM

Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.

I clicked; it's not malware. You can bring up the directory if you'd rather at http://50.19.139.134/.

What pool is the info from and how did the op get it?

Cryptoman

hero member

Activity: 726

Merit: 500

Quote from: fcmatt on September 22, 2011, 08:06:06 AM

Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.

I clicked; it's not malware. You can bring up the directory if you'd rather at http://50.19.139.134/.

fcmatt

legendary

Activity: 2072

Merit: 1001

Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.

mikethebodacious

member

Activity: 64

Merit: 10

Wow, that sucks pretty hardcore. I would just say if you're on that list to change your password immediately and hopefully wherever they got this account info from will get locked down soon!

giszmo

legendary

Activity: 1862

Merit: 1114

WalletScrutiny.com

Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?

Topic: Thousands of miners mail accounts + plain text password leaked! (Read 2233 times)