3,994
edits
Changes
Jump to navigation
Jump to search
no edit summary
== Password change fails, potentially compromised password ==
Hi Guaka! Long time! I recently got a spammy extortion email that included the password that I use here in plaintext. It's a really old password that I used many places like 15 years ago, so it's not certain that it was gleaned form HW, but it is paired with the email I used on HW, and I can't think of anywhere else that that is the case. I wanted to log in and change my password, but when I do so it seems like the password change doesn't stick. [[User:Zac Stewart|Zac]]<small><sup>[[User talk:Zac Stewart|talk]]</sup></small>
:Hi Zac!
:Strange. MediaWiki has been storing passwords as uniquely salted hashes for a very long time now. So even if an attacker would get a copy of the database, it would be very hard for them to figure out the actual password.
:But let's dive into this... Wanna send me an email at hitchiki AT myusername DOT org? [[User:Guaka|guaka]] ([[User talk:Guaka|talk]]) 15:36, 15 June 2021 (CEST)
