Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Bruno Girin
On 07/06/12 11:35, Joe wrote: > I figure if they already have the hash it's theoretically only a matter of > time before they crack it. > Using it at least tells you if your password has been cracked (if it is > honest about that) and so can help you to determine if there's a chance that > someo

Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Joe
tu-uk-boun...@lists.ubuntu.com Date: Thu, 7 Jun 2012 11:28:15 To: UK Ubuntu Talk Reply-To: UK Ubuntu Talk Cc: Subject: Re: [ubuntu-uk] phishing and LinkedIn Bear in mind the key here is to decrypt the hashes which are publically circulating. If you give them a password to hash for you, then they

Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Kris Douglas
On 7 June 2012 11:28, Jon Spriggs wrote: > Bear in mind the key here is to decrypt the hashes which are > publically circulating. If you give them a password to hash for you, > then they can then search for that hash and get a list of everyone > who's used that password. Even if it's just one pers

Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Jon Spriggs
Bear in mind the key here is to decrypt the hashes which are publically circulating. If you give them a password to hash for you, then they can then search for that hash and get a list of everyone who's used that password. Even if it's just one person, that's one password less they need to put thro

Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Kris Douglas
On 7 June 2012 10:36, Steve Flynn wrote: > > On 7 June 2012 03:29, Phill Whiteside wrote: > > > > > Anyways, don't go near the phishing site http://www.leakedin.org/ > > Except for a giggle :) > > > > What a wally! > > Not much of a phishing site if it doesn't have any means of collating > yo

Re: [ubuntu-uk] phishing and LinkedIn

2012-06-07 Thread Steve Flynn
On 7 June 2012 03:29, Phill Whiteside wrote: > > Anyways, don't go near the phishing site http://www.leakedin.org/ > Except for a giggle :) > > What a wally! Not much of a phishing site if it doesn't have any means of collating your login name... -- Steve When one person suffers from a de

[ubuntu-uk] phishing and LinkedIn

2012-06-06 Thread Phill Whiteside
Hi, further to my earlier note, it has been brought to my attention that a paid for, IT administrator for schools has managed to put his password into a phishing site. I do struggle to work out why anyone would put their password into any site that was not https, and also struggle as to why he is