Not good. Not good at all. 

Thanks for the warning Doc !

Because there are people lacking in compassion for whom the ends justify the means.

Because there are those who would rather steal than work, no matter whom they harm while doing it.

Yeah, I know, but it's not just the lazy bastards who'd rather steal than earn a crust, it's also those who hack primarily to cause harm, pain and frustration.  The cash 'reward' at the end actually disinterests them.  No, their 'reward' is derived more from the damage done, and those are the worst kind of hacker.  Not that I condone it, but stealing does have a point, in that there is an actual gain, but the senseless hacking that causes nothing but harm is beyond understanding.  No person in their right mind would do it, so one can only conclude that those who do it are bitter and twisted individuals with sick minds.... if you could call what's between their ears a mind.

Now I'm not normally an advocate of violence, but the world has become far too soft in criminals and something needs to be done, and I'm sick to the back teeth with true crime being inadequately dealt with while petty misdemeanors are more harshly punished.

Thanks for heads up Doc. 

I know I know.....I'm just the doomsayer but when information like this is finally made public it is unfortunately very late in the "information theft" game.  Of course passwords should be changed etc. but in my opinion one should always perform actions connected to the internet assuming that one's information (ie. accounts and all relevant information) are likely never private in the first place.

In what I do (dealing with corporate network/systems infrastructure) it has become painfully obvious that the term 'security' too often means 'locking the barn door AFTER the horse has escaped' and/or refers to Band-Aid fixes to issues that really have no solution in the first place.  The home user?  Is even more fucked....  Why do I say that?   When one of the nation's premier ISP's has (just as a small example) their DNS servers poisoned/hacked several times a year sometimes for longer periods of time (these are the servers that most users rely on to send/point their internet requests to the correct places) my faith in an even relatively safe internet landscape is non-existent.

 I wish I felt less pessimistic about the 'internet landscape' but my experience has taught me.......if you do anything (and I mean anything) on the internet at all.....understand that someone somewhere is doing it with you.  Internet security is a sick joke.....

Having said all that......thanks again Doc for always looking out for this community.  The world needs more of you! 

C, mon, Doc, you're already in 1st gear and rearing to go... so yeah, tell us how you really feel.

Aye!!  .... And i n triplicate, Aye, Aye, Aye.  

Thanks for posting, Doc.

I did change my passwords, now let's see if I'll remember the new ones.

I have a small book with passwords. It's not the optimal solution. Never got around setting up a password manager. I never knew if I could trust password managers. What if they get hacked? Then ALL your passwords are up for grabs. No, I rather lose one password at a time...

Maybe someone can convince me that password managers are good. Or not. Do you folks use them?

Thanks to the link in the post I found this site, that lets you check if you have been compromised.

https://haveibeenpwned.com/

The site seems legit, created by this guy:

https://www.troyhunt.com/

I checked my email-addresses. One had been compromised in the famous Linux Mint hack of this year. But my password was random and has now been changed so no biggie.

Anyway, this site by Troy Hunt is really useful I think. You don't have to wonder if you been "pwned". Just look it up.

http://arstechnica.com/security/2016/05/the-massive-password-breach-that-wasnt-google-says-data-is-98-bogus/

Just to clarify something: We live in a time when data is stolen. People, among them WC members, use these services. My job is to report this. If I had waited to report this to members, they would have been in jeopardy. Was it unreasonable to think that hackers stole this data? I do not believe so. This is a case of 20/20 hindsight. 

Is changing user name/password an unreasonable thing? Does it involve a massive inconvenience? I do not think so. As with many things, there is a risk/benefit ratio. Does the risk incurred by not changing a password (which should be done routinely, anyway) justify not doing so? Clearly not.

We should believe Google. Because Google.

Good on ya, Doc. 

Rather have the occasional 'false' alarm than a real fire & not know it.  I was due to change my master pword, anyway.  

Quoting Daiwa,

reply 23

Good on ya, Doc. 

Rather have the occasional 'false' alarm than a real fire & not know it.  I was due to change my master pword, anyway.  

agree.   better safe than sorry