Livejournal got hacked and was storing credentials insecurely.

[theweaselking]

Hey, just FYI, Livejournal got thoroughly pwned and all their passwords, stored IN PLAIN TEXT, got leaked. So if you used that password elsewhere, LIKE HERE, change it. They're actively attacking people who used the same PW on both LJ and DW.

Comments

[armiphlage]

Thank you.

[franklanguage]

Wait—do I need to change my pwd again or is this the same breach I already responded to last week?

[frith]

Same breach. Passwords + Usernames + email addresses probably harvested in 2014, redistributed in 2017, and someone has been plugging in the passwords and transforming existing accounts into spam accounts here on DW this year.

[secretagentmoof]

For those of y'all who don't already do so - for the love of FSM, *please* start using a password manager (lastpass, 1password, whatever) and use unique passwords across sites. Not having to remember multiple passwords is great, it can help prevent a bunch of phishing attacks, etc.