MySQL.com compromised

[Paul M]

MySQL.com got hit by a SQL Injection attack, resulting in account passwords being compromised.

http://blog.sucuri.net/2011/03/mysql...mpromised.html

[HMBeaty]

Oh that's lovely...

[Boofo]

Do we have to worry about this for our sites now?

[BirdOPrey5]

This is only a problem if you had an account on mysql.com. If you did your password may be compromised.

These attacks on major sites seem to becoming more and more common.

I hate to admit but I used to just use 1 secure password across multiple sites, but now that sites are getting compromised I've changed to very secure random passwords unique to every site- which is what everyone should have been doing all along but is just impractical.

Now I need a password manager to manage them all. So i have to keep that backed up in 3 places with it's own very secure password. :banghead:

[Boofo]

I have no account there so I am in the clear.

Like you, I use different passwords on all sites I am signed up on. I use a password maker that randomly makes 10 character passwords so it is fairly secure. Since I use Opera and Roboform (in IE and FF), backing up the password files is fairly easy.

[BirdOPrey5]

I'm looking at Roboform's website but I can't tell what I need. Do i need the "everywhere" do I need the deaktop/laptop or do I need both? Obviously I want to use it on my laptop and any other computer I may have...

But if I upload all my passwords to them, and they get hacked, it seems like I'm in a worse position than ever.

[Boofo]

The everywhere version is where you upload them to an account that you can access them from any computer. I don't trust them being out there on the net somewhere.

The Desktop version is the one I use and it stores it all on my system. I have the passwords directory set to my backup D: drive so I don't have to worry about saving them as they are not on the windows drive.

The best version to have, in my opinion is the desktop version. The portable version is nice if you are constantly accessing the net from different computers away from home, but I only access the net from home, so no biggie for me.

[BirdOPrey5]

Thanks... checking out LastPass now too. I currently use http://pwsafe.org/ - it's free and open source but pretty basic.

[Boofo]

I looked at LastPass and picked Roboform because it was so much better in my opinion. And it has been around a lot longer, too, IIRC. I've been a registered user of Roboform since 2004.

[Princeton]

RoboForm Everywhere is handy if you have multiple computers/laptop.