As far as I know, the passwords aren't stored in the databases, it's the hash produced by a one-way function that is stored in the database. Grabbing these is useless.
post
replies:
What is this article? Besides terrible, I mean. This article is terrible.
First of all, this isn't a new leak. It's not even a combination of old leaks. It's just somebody noticing that a bunch of leaks existed and did an Excel Sum operation on the passwords on them.
According to Vilius Petkauskas at Cybernews, whose researchers have been investigating the leakage since the start of the year, “30 exposed datasets containing from tens of millions to over 3.5 billion records each,” have been discovered. In total, Petkauskas has confirmed, the number of compromised records has now hit 16 billion. Let that sink in for a bit.
And to add insult to injury, the article has this gem:
Is This The GOAT When It Comes To Passwords Leaking?
Password compromise is no joke.
Certainly not with writing like this.
replies:
14 comments in c/news@lemmy.world view that post
There is a lot of hype in this article and precious little in the way of verifiable facts.
Does anyone have any links to something more credible?
replies:
OMG OMG ACT NOW! WE'RE ALL GOING TO DIE
twice a week...
I'm getting so tired of these clickbait articles always everywhere screaming at you.
I get the point, passwords leaked, AGAIN, they leak every week from somewhere, but can you just tone it down?
Pretty please?
Until I see an email from haveibeenpwned, I call shenanigans.
Can someone check if my password was leaked? It's "Hunter2". Thanks.
replies:
"It’s why Google is telling billions of users to replace their passwords with much secure passkeys."
Editing failures kind of undermine the credibility of the article. You literally had one job.
Password managers and 2fa works pretty well.
I’ve pretty much stopped caring about hacked / leaked creds. I figure I’m boring and ordinary enough that though I’ll maybe get targeted eventually, there’s not much to gain and so whatever.
10 comments in c/technology@lemmy.world view that post
There is a lot of hype in this article and precious little in the way of verifiable facts.
Does anyone have any links to something more credible?
replies:
This appears to just be a compilation of other leaks: https://www.bleepingcomputer.com/news/security/no-the-16-billion-credentials-leak-is-not-a-new-data-breach/
Still not a bad idea to change passwords and make sure MFA is enabled.
2 comments in c/infosec_news@infosec.pub view that post
It’s why Google is telling billions of users to replace their passwords with much secure passkeys.
Much secure. So passkey.
If only passkeys were not another excuse for user lock-in.
Also, users benefit from password sharing. Stop pretending that doesn't exist.
all 9 comments