News for hackers. Stuff that matters.

LinkedIn just sent me this

Hi X,

To make sure you continue having the best experience possible on LinkedIn, we're regularly monitoring our site and the Internet to keep your account information safe.

We've recently noticed a potential risk to your LinkedIn account coming from outside LinkedIn. Just to be safe, you'll need to reset your password the next time you log in.

Here's how:

1. Go to the LinkedIn website.

2. Next to the password field, click the "Forgot your password" link, and enter your email address.

3. You'll get an email from LinkedIn asking you to click a link that will help you reset your password.

4. Once you've reset your password, a confirmation email will be sent to the confirmed email addresses on your account.

Thanks for helping us keep your account safe,

The LinkedIn Team

( 9 comments | 6 points | on HN )
Re:LinkedIn just sent me this by jeffmould on Thursday May 19, 2016 @08:16AM (#11729557)
Not sure if it is related or not, but yesterday there was an article about credentials that were stolen in 2012 being sold now.

http://www.engadget.com/2016/05/19/linkedin-hack-password/

Re:LinkedIn just sent me this by twotavol on Thursday May 19, 2016 @08:03AM (#11729508)
Account breaches are so god damn annoying. That coupled with the stupid rules for coming up with passwords (only 6-8 characters, a-z,A-Z,0-9 allowed!) makes it really frustrating to keep track of and manage passwords for sites like this.

Hurry up and solve the user identification problem, HN.

Re:LinkedIn just sent me this by ChrisGranger on Thursday May 19, 2016 @12:28PM (#11731385)
It's astounding to me that some sites still limit passwords to such a small number of characters. "Security? We're not even trying."
Re:LinkedIn just sent me this by koolba on Thursday May 19, 2016 @12:52PM (#11731567)
Even stupider are sites that require exactly N characters. Also, they usually pick small N for that as well.
Re:LinkedIn just sent me this by speedyapoc on Thursday May 19, 2016 @04:16PM (#11733420)
I know a local bank that limits password lengths to exactly 7, and the contents of the passwords to ONLY DIGITS. I can't imagine how many users are going to just use their phone number.
Re:LinkedIn just sent me this by emilburzo on Thursday May 19, 2016 @08:34AM (#11729618)
^ exactly the reasons I went ahead and started using KeePassX.

It's a bit terrifying at first to not know any of your passwords, but you get used to it.

Re:LinkedIn just sent me this by mod on Thursday May 19, 2016 @03:00PM (#11732763)
It doesn't bother me, given the ubiquity of email resets.

I do still have a bunch of really old ones (pre-password-manager) memorized, though.

Re:LinkedIn just sent me this by Teichopsia on Friday May 20, 2016 @02:26AM (#11735864)
I got the same email a few weeks ago and a few days later a similar one from twitter.
Re:LinkedIn just sent me this by chiragmehta84 on Friday May 20, 2016 @12:41AM (#11735582)
Even I got same :(