Tag Archives: stolen passwords

Microsoft knows password-expiration policies are useless

Posted on by
Microsoft admitted today that password-expiration policies are a pointless security measure. Such requirements are "an ancient and obsolete mitigation of very low value," the company wrote in a blog post on draft security baseline settings for Window...

Man arrested for selling Netflix and Spotify accounts

Posted on by
The Australian Federal Police (AFP) announced today that they arrested a man accused of selling stolen login credentials online. The unnamed man, a 21-year-old living in Sydney, Australia, operated a website called WickedGen.com that advertised havin...

Stolen user data from MyFitnessPal and other services hits the dark web

Posted on by
Stolen user information from 16 popular apps and services including Dubsmash and MyFitnessPal is now being sold on the dark web, according to a report from The Register. A seller on the dark web marketplace Dream Market has come forward offering logi...

Dropbox two-step login verification available in experimental build, coming to all accounts soon

Posted on by

Dropbox twostep login verification available in experimental build, coming to all accounts soonFollowing up on its promise to tighten account security following a recent breach, Dropbox is now offering two-step login authentication to users who install the service's latest experimental desktop build. The team says the functionality will roll out to all users in the coming days, but listed full instructions to forum users who just can't wait. Those who op-in only need to download a new version of the Dropbox desktop software and activate the feature in their account settings. Once set up, Dropbox will require all unrecognized machines to provide a code, culled from an authenticator app or received via text message. The firm also provides an emergency back-up code that'll disable the feature should you lose your phone. Feeling insecure? Check out the source link below to get started.

Update: Dropbox just made it official, detailing set up instructions once more on the Dropbox blog.

Dropbox two-step login verification available in experimental build, coming to all accounts soon originally appeared on Engadget on Mon, 27 Aug 2012 04:39:00 EDT. Please see our terms for use of feeds.

Permalink Verge  |  sourceDropbox (1), (2), (3)  | Email this | Comments

Blizzard suffers security breach, encrypted passwords and authenticator data compromised

Posted on by

Change your passwords Blizzard suffers security breach, security questions, encrypted passwords compromisedAccording to a recent Blizzard security update, now might be a good time cook up a new password. Blizzard's security team found that its internal network has been illegally accessed, and answers to personal security questions, authenticator data and cryptographically scrambled Battle.net passwords have found their way into the perpetrator's hands. The team is confident, however, that the compromised data isn't enough to give the attacker access to user accounts, and says that there is no evidence to suggest financial data (credit cards, billing addresses and customer names) were accessed. Blizzard President Mike Morhaine recommends that users update their passwords all the same, and we couldn't agree more. Check out his official statement at the source link below and get that Diablo III account locked down.

Filed under:

Blizzard suffers security breach, encrypted passwords and authenticator data compromised originally appeared on Engadget on Thu, 09 Aug 2012 19:48:00 EDT. Please see our terms for use of feeds.

Permalink Massively (Joystiq)  |  sourceBlizzard  | Email this | Comments

Dropbox confirms user info was stolen, adds new security measures

Posted on by

Dropbox Pro accounts get doubled for the same price Dropbox has admitted that spam reported by its users over the last few weeks was the direct result of a security breach. Both login names and passwords were stolen from an unstated number of users, including a Dropbox employee. That account contained a list of clients' email addresses, which is what the company believes led to the spam in the first place. In response, it has contacted those affected to protect their accounts and outlined several new security features. These include a two-factor authentication option coming in several weeks and a new automated feature that will check for suspicious activity. A new landing page will also show you any logins to your account, while Dropbox reheated that always-helpful advise to avoid reusing passwords on multiple websites -- noting that a breach on one site can cause an entire cascade of grief.

Filed under: ,

Dropbox confirms user info was stolen, adds new security measures originally appeared on Engadget on Wed, 01 Aug 2012 04:19:00 EDT. Please see our terms for use of feeds.

Permalink TechCrunch  |  sourceDropbox  | Email this | Comments