Posted on 07/09/2024 8:55:18 AM PDT by george76
Cyber experts have urgently warned people to update their passwords after a hacker uploaded billions of login details.
The leak, called RockYou2024, was posted on July 4th containing a staggering 10 billion passwords from a compilation of old and new data breaches.
Researchers who revealed the leak said the information could allow hackers to target any system that isn’t protected by strict security software including online and offline services, online cameras and industrial hardware.
This could prompt a wave of data breaches, financial fraud and identity theft using the passwords, which were collected from more than 4,000 databases over the last two decades.
...
Researchers at Cybernews who investigated the hack said the perpetrator goes by the name ObamaCare.
The person appeared to use 8.4 billion passwords from an earlier crime forum released in 2021.
However, an additional 1.5 billion new passwords were obtained from records from 2021 to 2024.
‘Xmas came early this year,’ ObamaCare wrote on the forum.
‘I present to you a new rockyou2024 password list with over 9.9 billion passwords.’
The hacker added that they ‘also cracked some old ones with [their] new 4090,’ - a high-end Nvidia graphics card - containing ‘actual new real passwords from users.’
The file was released in a 45.6-gigabyte .zip archive using leaked records from sites like X (formerly Twitter), AdultFriendFinder, MyFitnessPal, LinkedIn and Adobe.
...
RockYou2024 leak is a compilation of real-world passwords used by individuals all over the world
...
should also enable multi-factor authentication which provides a second level of security by requiring verification like facial recognition or a PIN in addition to the password.
‘There really is no excuse not to use unique passwords for every single account as data breaches unfortunately continue to occur and grow,
(Excerpt) Read more at dailymail.co.uk ...
Get rid of LastPass and use Bitwarden instead.
I had a lot of trouble with LastPass inserting garbage HTML code in edit boxes that had nothing to do with logging in. They claimed that they fixed the problem but it was still there.
It took me a while to figure out what was causing the problem, but once I did, LastPass went in the bit bucket forever.
I argued, unsuccessfully, that the requirements they were levying almost guaranteed that users would do the ONE thing that they never should, WRITE DOWN A PASSWORD.
I went in to a Joint Service Command one weekend and ran into an Army general and an Air Force Colonel trying to figure out how to get into a subordinate AF Major's computer because they needed a report. I asked if I could have a try. I poked about but didn't find a written PW. So I stared at what was on his desk and the pictures. I got his PW on the first try. I suggested that they have the MAJ change his PW to something less easy to guess.
I should note that our most secure systems were never affected by this policy. They were already inside SCIFs and did not have outside access except through cryptographic gear.
You would be amazed at what I could tell you about a command with just access to the UNCLAS administrative computer systems.
SpyNavy
Garde la Foi, mes amis! Nous nous sommes les sauveurs de la République! Maintenant et Toujours!
(Keep the Faith, my friends! We are the saviors of the Republic! Now and Forever!)
LonePalm, le Républicain du verre cassé (The Broken Glass Republican)
Use a capital “P” No one has hacked mine yet...
Remind me to change the combo on my suitcase.
I update mine every few years. Now using 333333....
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.