Password breach warning

rabbitBUSH

Well-Known Member
Licensed User
Longtime User
I just logged in using chrome on the phone and received this warning. Anyone else received this - and - has there been a data breach at Anywhere? I don't generally use PWD manager on this device but.....

 

rabbitBUSH

Well-Known Member
Licensed User
Longtime User
Thanks @Erel ..... seems like a false positive from Chrome.... It did not appear at this log in with no action taken by me overnight. I'll consider action later on.
 

hatzisn

Expert
Licensed User
Longtime User
rabbitBUSH said:
Thanks @Erel ..... seems like a false positive from Chrome.... It did not appear at this log in with no action taken by me overnight. I'll consider action later on.
Click to expand...

If I were you I would think that someone may have gained access to my google account and has access to all the saved in chrome passwords. You might want to pay a visit to account.google.com and check in the security the devices that access your google account. Google is never wrong since it crawls the dark web everyday. If you use the same pair of credentials also in an other site then the breach might be on it.
 

Sandman

Expert
Licensed User
Longtime User
Erel said:
I'm not familiar with any breach, and the passwords aren't saved in the forum database. Only a hash of the password (with a salt).
Click to expand...
Just a minor note, they don't say the breach happened at B4X. They only say that the password has been found in A breach. So if @rabbitBUSH have reused their password from some other site, which have had a breach, that would trigger this message.

A simple solution would be to just check, without research I'm willing to bet that they base that data on this site: https://haveibeenpwned.com (it's trustworthy)
 

rabbitBUSH

Well-Known Member
Licensed User
Longtime User
hatzisn said:
saved in chrome passwords.
Click to expand...
Thanks for the comment @hatzisn ....I don't generally store Any passwords in any of the so called secure "secure online" password managers. Also never log into sites using Google credentials (and I don't do TwitFace so I can't ever do it that way either, no accounts on any of that stuff).

But I'm going to go through those motions as suggested anyway - when I get out of the bush and into the office.
As I noted to @Erel - the warning isn't showing up today (on this phone) and it's the third time I'm entering.
 

rabbitBUSH

Well-Known Member
Licensed User
Longtime User
Sandman said:
Just a minor note, they don't say the breach happened at B4X
Click to expand...
Thanks for the comments @Sandman - that particular PWD is Only used on B4X. We have a policy on PWD creation so every site's log in credentials are unique in that respect. And the USR is also unique to B4X come to think of it...... All USR are just email addresses as per the site request - but all PWDs are unique. (It's not a very long list, but it's a lost none the less.)
 

rabbitBUSH

Well-Known Member
Licensed User
Longtime User

Sandman

Expert
Licensed User
Longtime User
For completeness, they don't say that the combination of username and password has been breached. They only mention your password. So even though you might have MyVery1337Password as your password for this forum only, it's entirely possible some other individual have that exact same password - which has appeared in a breach. Which might trigger that alert.

All in all, I wouldn't worry too much. But I would also change my password, just in case.
 

rabbitBUSH

Well-Known Member
Licensed User
Longtime User
Sandman said:
entirely possible some other individual have that exact same password -
Click to expand...
Ooooo that Would be interesting - someone who can speak South Sotho language - be like an Axis Power trying to decipher an encrypted Navaho wartime transmission.

If one goes to havibeenpwnd practically any mail address shows up in breeches....breech lists run into billions long (or wait was that trillions?).

Not too worried about it will just carry on amongst the vigilante crowd.....

 
You must log in or register to reply here.
Menu
Log in
Register
Cookies are required to use this site. You must accept them to continue using the site. Learn more…