Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: flug on June 19, 2011, 11:08:57 PM



Title: Did Mt.Gox leak my details? Check here
Post by: flug on June 19, 2011, 11:08:57 PM
Did Mt.Gox leak my details? Check here:

http://mtgoxcheck.heroku.com/


Title: Re: Did Mt.Gox leak my details? Check here
Post by: RandyMarsh on June 19, 2011, 11:30:26 PM
umm, didnt it leak the entire database of users?


Title: Re: Did Mt.Gox leak my details? Check here
Post by: Rob P. on June 20, 2011, 12:13:11 AM
umm, didnt it leak the entire database of users?

Yes, every account at MtGox was "leaked".  Lots of folks have usernames, email addresses (if you had one associated), and the HASHED password.  The only way to break the password is brute force hashing (anyone got a rig for that?).  If you have a strong password, you're probably fine.  If you had a weak password, you're compromised.  If you used that password on an account somewhere associated with either the username or the email address in question, you're probably compromised there as well.


Title: Re: Did Mt.Gox leak my details? Check here
Post by: Rob P. on June 20, 2011, 12:14:23 AM
umm, didnt it leak the entire database of users?

Yes, every account at MtGox was "leaked".  Lots of folks have usernames, email addresses (if you had one associated), and the HASHED password.  The only way to break the password is brute force hashing (anyone got a rig for that?).  If you have a strong password, you're probably fine.  If you had a weak password, you're compromised.  If you used that password on an account somewhere associated with either the username or the email address in question, you're probably compromised there as well.

Just an FYI.  There are 61,017 rows in the file.  That's a crap ton of accounts.


Title: Re: Did Mt.Gox leak my details? Check here
Post by: EricJ2190 on June 20, 2011, 12:31:37 AM
You should probably make it case insensitive. Putting my email in all lowercase tells me "Nope!" but putting it in the same way it is in the database says "Yup!"