PSA: If you have a LinkedIn account, change your password.

[403]

And that of any other account for which you've used the same password, of course.

LinkedIn's hash database seems to now be circulating on the internet, and it turns out not to be salted. That makes it easy for someone who knows what they're doing to simply brute-force compute hash codes and work backwards to individual passwords.

(h/t @mrkoot via @0xabad1dea)

Comments

[milkymoon]

Probably a good thing that we don't use dictionary-word passwords.