[silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
This morning I received a notification from haveibeenpwned dot com informing me that the latest leak from UnderArmor affiliated My Fitness Pal app has my details included in the data that was breached. What steps do you recommend people should take if they're data has been stolen? Compromised dat

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Udhay Shankar N
On Fri, Feb 22, 2019 at 1:39 PM Ra Jesh wrote: Compromised data included email addresses, IP Addresses, passwords, and > usernames. > 1. Log out all gmail/facebook/other social sessions (Most providers give you the option to "log out all current sessions") 2. Change all the passwords of pwned em

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Udhay Shankar N
On Fri, Feb 22, 2019 at 2:04 PM Udhay Shankar N wrote: > 1. Log out all gmail/facebook/other social sessions (Most providers give > you the option to "log out all current sessions") > 2. Change all the passwords of pwned email addresses > 3. Enable 2FA EVERYWHERE that supports it. Ideally, with

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
This are good suggestions! Thanks Udhay. I was wondering if anyone has had this happen before and what steps they took. Have you ever been notified that your email ID and/or other details appears in a dump of data breach info? On Fri, Feb 22, 2019, 16:11 Udhay Shankar N wrote: > On Fri, Feb 22

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Thaths
On Fri, Feb 22, 2019 at 2:42 AM Udhay Shankar N wrote: > On Fri, Feb 22, 2019 at 2:04 PM Udhay Shankar N wrote: > > > > 1. Log out all gmail/facebook/other social sessions (Most providers give > > you the option to "log out all current sessions") > > 2. Change all the passwords of pwned email ad

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ashim D'Silva
For sites I don’t use too often, I was always tempted to reuse passwords which is a pretty bad practice, so I started just using the forgot password feature more often. So I have a ridiculous entirely random password that I don’t know, and then just say forgot password when I want to log in. It’s

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ra Jesh
Hahaha. Neat!!! On Fri, Feb 22, 2019, 20:51 Ashim D'Silva wrote: > For sites I don’t use too often, I was always tempted to reuse passwords > which is a pretty bad practice, so I started just using the forgot password > feature more often. So I have a ridiculous entirely random password that I >

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Deepa Mohan
I must say that "use 'forgot password'!" is advice I get very often from my bank. I think it is an absurd solution that works! On Fri, Feb 22, 2019 at 8:53 PM Ra Jesh wrote: > Hahaha. Neat!!! > > On Fri, Feb 22, 2019, 20:51 Ashim D'Silva > wrote: > > > For sites I don’t use too often, I was alw

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Ashim D'Silva
Medium made a huge deal about it when they released it as a feature: https://blog.medium.com/signing-in-to-medium-by-email-aacc21134fcd Makes total sense though; passwords are an old solution to a difficult problem. Of course it also means that your email better always be in your control otherwise

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Sidin Vadukut
The haveibeenpwned.com site is great and I use it every six months or to check if any logins have been compromised. (Sorry I keep forgetting the Silk protocol about replying before or after a thread.) On Fri, Feb 22, 2019 at 3:59 PM Ashim D'Silva wrote: > Medium made a huge deal about it when

Re: [silk] What do you do when you get to know that you have been pwned?

2019-02-22 Thread Thaths
On Fri, Feb 22, 2019 at 7:24 AM Ra Jesh wrote: > Hahaha. Neat!!! > Actually, (a) If you are doing this "Forgot password" thing too often on a reasonably well-built site, you are setting off all kinds of red flags about being a potentially malicious actor. If they have a bot-or-not reputation sco

[silk] Hi, I’m Geetanjali

2019-02-22 Thread Geetanjali Chitnis
Hello! Udhay, thank you for inviting me to the last Silklist meet-up and for adding me to the list! I’m excited to be here. I’ve known a few list members for pretty much all my life, and I look forward to meeting more of you soon. I’m Geetanjali Chitnis from Bangalore. I did my schooling at Mally

Re: [silk] Hi, I’m Geetanjali

2019-02-22 Thread Ashim D'Silva
Hello! And welcome. Cheerio, Ashim Design & Build The Random Lines www.therandomlines.com On Sat, 23 Feb 2019 at 08:57, Geetanjali Chitnis wrote: > Hello! > > Udhay, thank you for inviting me to the last Silklist meet-up and for > adding me to the list! I’m excited to be here. I’ve known a f