full-disclosure - LulzCheck--a tool for checking account security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTi=c1rSOPi0p40Fn9oux2HW2oA0FqQ@mail.gmail.com>
Date: Sun, 26 Jun 2011 02:18:37 -0400
From: Nathan Whitmore <nathanww@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: LulzCheck--a tool for checking account security

So, apparently LulzSec is  over and done with. Even so, they’ve left a lot
behind, in the form of more than 100,000 compromised passwords. Cearly, this
is still potentially a problem, especially considering password reuse.

LulzCheck is a Greasemonkey script for Firefox. Basically, whenever you log
into a website, it checks the username that you supply against an updated
list of accounts that have been “leaked” by LulzSec, and gives you a warning
if it finds your login in that list.

Keep in mind, if you get a warning message, it *may not actually apply to
the site that your are logging into. *Because people reuse logins, and the
ultimate origin of some of the leaked usernames/passwords is unknown, it’s
not really possible for LulzCheck to automatically pin down exactly what
accounts you need to change.

*LulzCheck can be downloaded at http://userscripts.org/scripts/show/105484*

-- 
Any technology distinguishable from magic is by definition insufficiently
advanced

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/