MySQL.com compromised
 

MySQL.com got hit by a SQL Injection attack, resulting in account passwords being compromised.

http://blog.sucuri.net/2011/03/mysql...mpromised.html

Oh that's lovely...

Do we have to worry about this for our sites now?

This is only a problem if you had an account on mysql.com. If you did your password may be compromised.

These attacks on major sites seem to becoming more and more common.

I hate to admit but I used to just use 1 secure password across multiple sites, but now that sites are getting compromised I've changed to very secure random passwords unique to every site- which is what everyone should have been doing all along but is just impractical.

Now I need a password manager to manage them all. So i have to keep that backed up in 3 places with it's own very secure password. :banghead:

I have no account there so I am in the clear.

Like you, I use different passwords on all sites I am signed up on. I use a password maker that randomly makes 10 character passwords so it is fairly secure. Since I use Opera and Roboform (in IE and FF), backing up the password files is fairly easy.

I'm looking at Roboform's website but I can't tell what I need. Do i need the "everywhere" do I need the deaktop/laptop or do I need both? Obviously I want to use it on my laptop and any other computer I may have...

But if I upload all my passwords to them, and they get hacked, it seems like I'm in a worse position than ever.

The everywhere version is where you upload them to an account that you can access them from any computer. I don't trust them being out there on the net somewhere.

The Desktop version is the one I use and it stores it all on my system. I have the passwords directory set to my backup D: drive so I don't have to worry about saving them as they are not on the windows drive.

The best version to have, in my opinion is the desktop version. The portable version is nice if you are constantly accessing the net from different computers away from home, but I only access the net from home, so no biggie for me.

Thanks... checking out LastPass now too. I currently use http://pwsafe.org/ - it's free and open source but pretty basic.

I looked at LastPass and picked Roboform because it was so much better in my opinion. And it has been around a lot longer, too, IIRC. I've been a registered user of Roboform since 2004. ;)

RoboForm Everywhere is handy if you have multiple computers/laptop.

Handy, yes. Safe? Not so sure. What happens when the place you upload all your passwords to gets hacked?

I believe the passwords are encrypted - the same applies to their RoboForm2Go version.

RoboForm2Go is their portable version so the passwords do not get uploaded to their servers.

oh my..

Cant wait for the world to be cloud computing. Password stealing is going to seem like a waste of time compared to getting your hands on everyones full data storage.

My concern is, if there was a way to store passwords to be uncrackable, websites would just use that to store their passwords to begin with, no? Why would one have better encryption than the other?

Cloud computing will only make things worse. Then almost everything will be stored online for hackers to try and get access to.

I use Keefox (free) and syncronize the encrypted data file over dropbox. For FF i use the Keefox extension. Advantage: I use it for all kinds of client side passwords, too (serials, passwords for online banking etc.). The auto insertion works not only for browsers.

Ironic but i hope they fix it. MYSQL is very nice.

+1

It means that if they get access to the cloud they will access to your whole life, and more than that, access to everybody's lifes!

Can't beat using random 15 character passwords on all sites, and then simply saving it into a .txt file.

Sure...it takes a few times after seeing it until you actually remember it, so you have to look in the .txt file a bunch,
but for us security freaks. It's worth it. :)

finger scanner .............

A txt file? Honestly? Great security concept. How hard is your computer to break into? At least use a good password safe that uses a local encrypted database! (Keefox comes to mind, it's open source, too)