News for hackers. Stuff that matters.
Re:6.5 Million LinkedIn Password Hashes Leaked by madmaze on Wednesday June 06, 2012 @10:43AM (#4074103)
I disagree with #5, I had a few of my coworkers check their sha1 against the DB and most of them were not in the dump. I also checked for truncated hashed, none of which were found. I have the feeling this is a subset of the full database
Re:6.5 Million LinkedIn Password Hashes Leaked by barik on Wednesday June 06, 2012 @11:31AM (#4074382)
I don't really see a purpose in hiding my password. So, as a counterpoint, my password is in the list. This is my LinkedIn password:

AxEWS9rg5V

This is the sha1:

caf28fcc9c3e4d88b830b8e5cc52c5b65d3db5f4

It is found in Line 3612910 of combo_not.txt. I believe the file is authentic.

Re:6.5 Million LinkedIn Password Hashes Leaked by jen_h on Wednesday June 06, 2012 @04:42PM (#4076110)
So I have a funny wild theory...remember back when the Gawker database was compromised? And LinkedIn forced a password reset for users who (according to what I read) used email addresses that matched the Gawker leak?

What if they also (or actually) compared password hashes from their database to the ones released in the Gawker breach? In that case, they likely wouldn't have pulled data straight from the database but actually might have pulled passes from the db, output to text files, cut the text files up to parcel out for processing via Hadoop or something? And somehow one of those text files got loose somehow...or someone MiTMed the actual process (I'd vote for a floating text file just because it's been so long; the Gawker breach was in December 2010).

Re:6.5 Million LinkedIn Password Hashes Leaked by madmaze on Wednesday June 06, 2012 @10:50AM (#4074136)
on another note,

my fairly complex alphanumeric+symbol password IS in the dump, though not prepended truncated with 0's and the other one I found, which my coworker admitted was too short and alpha only, was in the dump with prepended 0's.

This could validate the fact that the truncated hashes are actually already cracked.

Re:6.5 Million LinkedIn Password Hashes Leaked by nupark2 on Wednesday June 06, 2012 @02:19PM (#4075271)
Mine was 5 characters, alpha and numeric, but no special characters. It was in there, prepended with 0's.

Whoops.

At the very least, it should have been longer.

Re:6.5 Million LinkedIn Password Hashes Leaked by tomh on Wednesday June 06, 2012 @02:48PM (#4075442)
Same here - mine was all alpha characters, seven characters, and the hash with five 0's was in the file. Guess who just changed their LinkedIn password today? And included some numbers?
Re:6.5 Million LinkedIn Password Hashes Leaked by ddlatham on Wednesday June 06, 2012 @11:41AM (#4074445)
Another datum: the hash of my password (randomly generated 8 character mixed case alphanumeric) was in the file, without any overwritten 0's.
Re:6.5 Million LinkedIn Password Hashes Leaked by yesbabyyes on Wednesday June 06, 2012 @04:17PM (#4075963)
My password is in the dump. I use the Forget Passwords Chrome extension [1], which is based on pwdhash.com, and generate site-specific passwords based on a master password -- i.e. my password is only used on LinkedIn and it's unlikely that I share it with someone else.

I think I have changed to this password during the last year.

Re:6.5 Million LinkedIn Password Hashes Leaked by leot on Wednesday June 06, 2012 @01:20PM (#4074951)
Mine is there.

(email me if you need proof)

Re:6.5 Million LinkedIn Password Hashes Leaked by daurnimator on Wednesday June 06, 2012 @02:42PM (#4075417)
My linkedin password of at least 3 years was not in the dump. So it must be a partial...