Was your Gmail compromised in yesterday's attack?

Re:Was your Gmail compromised in yesterday's attack? by malvosenior on Thursday September 11, 2014 @11:25AM (#8303082)

Says my account was hacked, but then gives me the incorrect two letters for the start of my password. Seems bunk.

Also, why wouldn't you give your email address to a random website? I have it plastered all over the net. Spam is a solved problem at this point. Ironically thanks to Gmail!

Agree on 2 factor auth though.

[ Parent | on HN ]

Re:Was your Gmail compromised in yesterday's attack? by SloopJon on Thursday September 11, 2014 @11:37AM (#8303179)

Most of the stories about this list have pointed out that it doesn't necessarily contain passwords from Gmail, but from various accounts that used a Gmail address as a username.

Someone on Slashdot searched for "+" suffixes in the list, as in [email protected]:

http://tech.slashdot.org/comments.pl?sid=5680529&cid=4787421...

Some of the most popular suffixes were xtube, daz (and daz3d), filedropper, and eharmony. The two characters returned by isleaked.com for my address could indeed have been from daz3d.com.

[ Parent | on HN ]

Re:Was your Gmail compromised in yesterday's attack? by nmjohn on Thursday September 11, 2014 @11:30AM (#8303131)

The passwords didn't come from google.

It was someplace you used your email with that password. It had a couple of my emails all with the same throwaway password I only use on sites that I either don't trust or have no intention of ever using again.

If you search around the full leak is very easy to find

[ Parent | on HN ]

Re:Was your Gmail compromised in yesterday's attack? by omh on Thursday September 11, 2014 @11:30AM (#8303125)

Says my account was hacked, but then gives me the incorrect two letters for the start of my password

Out of interest - are those two letters the start of a password from any other site?

Presumably the leak came from a third party site so it would be your password from there rather than your gmail password.

[ Parent | on HN ]

Re:Was your Gmail compromised in yesterday's attack? by malvosenior on Thursday September 11, 2014 @11:32AM (#8303145)

Nope, I have a throwaway I normally use but this isn't it. Not sure what this is coming from, but I don't recall any passwords that start with these two characters.

[ Parent | on HN ]

Re:Was your Gmail compromised in yesterday's attack? by stultus on Friday September 12, 2014 @03:10AM (#8306901)

for me it shows first two letters of the email itself. I might have used the username itself as a password in some random site, but this is/was not my gmail password :)

[ Parent | on HN ]