<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr; font-family: Verdana; color: rgb(0, 0, 0); font-size: 13px;">
<div style="">Yeah, they're pulling it down as quickly as it's put up. It looks like they killed the tracker I was using, so I can't even send you that.<br>
<br>
Kenny, your password was listed as NULL, so odds are you logged in through Facebook or the like. (Kinda odd to think of a Facebook account HELPING security. ;)<br>
<br>
If you want the password DB, show up to the LUG meeting this week with a USB drive with about 500Mb to spare. (I won't give it anyone I do not know personally, by the way.) It makes for interesting reading.<br>
</div>
<div><br>
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Arial; font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;"><font size="2"><span style="font-size: 11pt;"><font size="2"><span style="font-size: 10pt;"><font size="3"><span style="font-weight: bold;">Josh More</span></font> | Senior Security Consultant - CISSP, GIAC-GSLC, GIAC-GCIH<br>
<span style="font-weight: bold;">Alliance Technologies</span> | <a href="http://www.alliancetechnologies.net" style="color: rgb(255, 0, 0);">
www.AllianceTechnologies.net</a><br>
400 Locust St., Suite 840 | Des Moines, IA 50309<br>
515.245.7701 | 888.387.5670 x7701<br>
</span></font></span></font><br>
Santa is Secure. Are you? <br>
<a href="http://www.alliancetechnologies.net/security/santa-2010">http://www.alliancetechnologies.net/security/santa-2010</a><br>
<br>
<font size="2"><span style="font-size: 11pt;"><font size="2"><span style="font-size: 10pt;">How are we doing? Let us know here:<br>
<a href="http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey">http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey</a><br>
</span></font></span></font>
<p class="MsoNormal"></p>
<div style="font-size: 13px;"></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF842467"><font color="#000000" size="2" face="Tahoma"><b>From:</b> cialug-bounces@cialug.org [cialug-bounces@cialug.org] on behalf of Kenneth Younger [kyounger@gmail.com]<br>
<b>Sent:</b> Monday, December 13, 2010 11:43<br>
<b>To:</b> Central Iowa Linux Users Group<br>
<b>Subject:</b> Re: [Cialug] Change your password on gawker sites<br>
</font><br>
</div>
<div></div>
<div>Yes, I keep seeing it mentioned that it's on torrent sites, but I can't seem to find it at all. I'm more curious what my password was on that site than I am about changing it. It was so long ago (and I don't comment on their sites anymore) that I can't
remember it and it's not in my LastPass vault.<br>
<br>
If anyone does run across it, I would be interested in knowing what password I used. Feel free to email me and let me know.<br>
<br>
Or go put some wacky off the wall comments on some Gawker post, then let me know.<br>
<br>
-Kenny<br>
<br>
<div class="gmail_quote">On Mon, Dec 13, 2010 at 10:57 AM, Josh More <span dir="ltr">
<<a href="mailto:MoreJ@alliancetechnologies.net" target="_blank">MoreJ@alliancetechnologies.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div>
<div style="direction: ltr; font-family: Verdana; color: rgb(0, 0, 0); font-size: 13px;">
<div>You can check if your account was compromised here: <a href="http://www.google.com/fusiontables/DataSource?dsrcid=350662" target="_blank">
http://www.google.com/fusiontables/DataSource?dsrcid=350662</a><br>
<br>
Just do a search on the MD5 of your email address, instructions are in the right column of the spreadsheet.<br>
<br>
I'm still looking for the raw dump of the stolen data so I can analyze it.<br>
</div>
<div><br>
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Tahoma; font-size: 13px;">
<div style="font-family: Arial; font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;">
<div style="font-size: 13px;"><font size="2"><span style="font-size: 11pt;"><font size="2"><span style="font-size: 10pt;"><font size="3"><span style="font-weight: bold;">Josh More</span></font> | Senior Security Consultant - CISSP, GIAC-GSLC, GIAC-GCIH<br>
<span style="font-weight: bold;">Alliance Technologies</span> | <a href="http://www.alliancetechnologies.net" style="color: rgb(255, 0, 0);" target="_blank">
www.AllianceTechnologies.net</a><br>
400 Locust St., Suite 840 | Des Moines, IA 50309<br>
515.245.7701 | 888.387.5670 x7701<br>
</span></font></span></font><br>
Santa is Secure. Are you? <br>
<a href="http://www.alliancetechnologies.net/security/santa-2010" target="_blank">http://www.alliancetechnologies.net/security/santa-2010</a><br>
<br>
<font size="2"><span style="font-size: 11pt;"><font size="2"><span style="font-size: 10pt;">How are we doing? Let us know here:<br>
<a href="http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey" target="_blank">http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey</a><br>
</span></font></span></font>
<p class="MsoNormal"></p>
<div style="font-size: 13px;"></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr>
<div style="direction: ltr;"><font color="#000000" size="2" face="Tahoma"><b>From:</b>
<a href="mailto:cialug-bounces@cialug.org" target="_blank">cialug-bounces@cialug.org</a> [<a href="mailto:cialug-bounces@cialug.org" target="_blank">cialug-bounces@cialug.org</a>] on behalf of Matthew Nuzum [<a href="mailto:newz@bearfruit.org" target="_blank">newz@bearfruit.org</a>]<br>
<b>Sent:</b> Monday, December 13, 2010 09:13<br>
<b>To:</b> Central Iowa Linux Users Group<br>
<b>Subject:</b> [Cialug] Change your password on gawker sites<br>
</font><br>
</div>
<div class="im">
<div></div>
<div>Hi, if you use lifehacker, gizmodo or one of the other gawker websites your password may have been compromised (along with 1.5M others)
<div><br>
</div>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
While initially denying the attack, Gawker has issued an apology to its users on all of its sites, urging them to change their passwords because of the attack. [1] If you have ever commented on any of the Gawker sites, we recommend that you go and change your
password. </blockquote>
<div><br>
</div>
<div><a href="http://www.digitaltrends.com/computing/gawker-hacked-1-5-million-accounts-compromised/" target="_blank">http://www.digitaltrends.com/computing/gawker-hacked-1-5-million-accounts-compromised/</a></div>
<div><br>
</div>
<div><br>
</div>
<div>[1] <a href="http://lifehacker.com/5712785/" target="_blank">http://lifehacker.com/5712785/</a><br clear="all">
<br>
</div>
<div><span style="font-family: 'Lucida Grande',Helvetica,Arial,sans-serif; font-size: 12px; line-height: 20px;">
<p style="margin: 0px 0px 1.5em; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent;">
<b style="margin: 0px; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent;">1) How do I know if my password was hacked?</b><br>
If you've registered an account on any Gawker Media web site (that includes Gawker, Gizmodo, Jalopnik, Jezebel, Kotaku, Lifehacker, Deadspin, io9, or Fleshbot), and you didn't log in using Facebook Connect, then it's best to assume that your username and password
were included among the leaked data.</p>
<p style="margin: 0px 0px 1.5em; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent;">
Passwords in our database are encrypted (i.e., not stored in plain text), but they're still potentially vulnerable to hackers. You should immediately change the password on your account, and if you used that password on any other web site, <a href="http://lifehacker.com/5712785/#4" style="margin: 0px; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent; text-decoration: none; color: rgb(120, 110, 41);" target="_blank">you
should change your passwords on all of those accounts</a> as well.</p>
<p style="margin: 0px 0px 1.5em; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent;">
<b style="margin: 0px; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent;"><a name="12ce0ab1950576b8_2" style="margin: 0px; padding: 0px; border-width: 0px; outline-width: 0px; font-size: 12px; vertical-align: baseline; background-color: transparent; text-decoration: none; color: rgb(120, 110, 41);"></a>2)
What if I logged in using Facebook Connect? Was my password compromised?</b><br>
No. We never stored passwords of users who logged in using Facebook Connect.</p>
<div><br>
</div>
</span>-- <br>
Matthew Nuzum<br>
newz2000 on freenode, skype, linkedin, <a href="http://identi.ca" target="_blank">
identi.ca</a> and twitter<br>
<br>
"An investment in knowledge pays the best interest." -Benjamin Franklin <br>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
Cialug mailing list<br>
<a href="mailto:Cialug@cialug.org" target="_blank">Cialug@cialug.org</a><br>
<a href="http://cialug.org/mailman/listinfo/cialug" target="_blank">http://cialug.org/mailman/listinfo/cialug</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<font color="#888888">Kenneth Younger III<br>
Founder, Sheer Focus Inc.<br>
Organizer, WordCamp Iowa<br>
e: <a href="mailto:kenny@sheerfocus.com" target="_blank">kenny@sheerfocus.com</a><br>
p: (515) 367-0001<br>
t: <a href="http://twitter.com/kenny" target="_blank">@kenny</a></font><br>
</div>
</div>
</div>
</body>
</html>