Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: giszmo on September 22, 2011, 11:21:52 AM



Title: Thousands of miners mail accounts + plain text password leaked!
Post by: giszmo on September 22, 2011, 11:21:52 AM
Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: mikethebodacious on September 22, 2011, 12:21:36 PM
Wow, that sucks pretty hardcore.  I would just say if you're on that list to change your password immediately and hopefully wherever they got this account info from will get locked down soon!


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: fcmatt on September 22, 2011, 01:06:06 PM
Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: Cryptoman on September 22, 2011, 01:08:44 PM
Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.

I clicked; it's not malware.  You can bring up the directory if you'd rather at http://50.19.139.134/.


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: fcmatt on September 22, 2011, 01:12:09 PM

Who puts plain text files on www as test.php. Fails to mention the pool name. This smells. Dont click.

I clicked; it's not malware.  You can bring up the directory if you'd rather at http://50.19.139.134/.

What pool is the info from and how did the op get it?


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: giszmo on September 22, 2011, 01:21:29 PM
What pool is the info from and how did the op get it?

No idea which pool it was. Those affected will know.
I got the link from the other thread (https://bitcointalk.org/index.php?topic=45216.msg539254). Apparently this document is in google's search index.


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: Serge on September 22, 2011, 01:34:58 PM
if someone wants my worker password, to mine bitcoins for me, just ask =)


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: flower1024 on September 22, 2011, 02:57:08 PM
Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?


please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

i can handle spam....


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: Ayo_4_Yayo on September 22, 2011, 03:27:02 PM
All this talk of leaks means someone left the water running, think of the waste.


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: giszmo on September 22, 2011, 03:39:28 PM
please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

*sigh* ... google can definitely check if your password leaked or not from that list. In case it did and only then should they lock down your account for reactivation via date of birth, sms or whatever ...


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: hollajandro on September 22, 2011, 10:48:49 PM
Since miner passwords are sent in plaintext every time your miner connects to a pool, I'd say anyone using this password anywhere else almost deserves it.


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: greyhawk on September 22, 2011, 10:51:32 PM
Hi,

I want to ask course of action as the other thread doesn't get the necessary attention.
http://50.19.139.134/test.php
leaked thousands of mails with worker passwords but many are legit passwords of the mail accounts too for sure.

Is there any place to go to get all these mail accounts locked down?


please... DO NOT LOCK DOWN MY EMAIL ACCOUNT!!!!!!!!!!

i can handle spam....

Which one is it?


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: sadpandatech on September 23, 2011, 05:25:41 AM
Well, no offense to anyone that does not know any better, butttttttttttt.. Anyone who uses the same email, username, password or any combination of the 3 on more than one thing online these days is fuggin retarded.......


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: dust on September 23, 2011, 07:10:22 AM
Link is dead now.  Anyone know which pools this info is from?


Title: Re: Thousands of miners mail accounts + plain text password leaked!
Post by: repentance on September 23, 2011, 07:42:32 AM
Link is dead now.  Anyone know which pools this info is from?

Nofeemining.

The other thread is only three pages long if you want to know more about it.  It's part of their old database.

https://bitcointalk.org/index.php?topic=45216.msg539852#msg539852

Given that the files themselves were from July and the many good reasons for people to have changed their passwords around that time, it's insane if those passwords are still valid for anyone's email or exchange accounts (and judging by the other thread, at least some of them are still valid for email accounts).