News for hackers. Stuff that matters.

A comment on Changing Your LinkedIn Password Still May Not Have Kept Your Account Safe.

Re:Changing Your LinkedIn Password Still May Not Have Kept Y... by unreal37 on Saturday June 23, 2012 @01:57PM (#4151374)
Yes, I'm sure the hackers downloaded the iPad app and logged in to your account before you changed your password (as opposed to the 6 million other peoples passwords). Paranoid much?
[ Parent | on HN ]
Re:Changing Your LinkedIn Password Still May Not Have Kept Y... by andrewcooke on Saturday June 23, 2012 @02:06PM (#4151394)
it's reasonable to assume that, if you steal a pile of passwords and then release them to the web for cracking, people will change their passwords. given that, it's not too crazy to write some kind of script that gets (and renews, as required) a valid session key for each password you crack - it's a simple, smart way of keeping access to the system even after the expected change in password.

sarcastic comments don't make things any better.

[ Parent | on HN ]