{"id":677,"date":"2012-06-07T13:47:16","date_gmt":"2012-06-07T12:47:16","guid":{"rendered":"http:\/\/trigonakis.com\/blog\/?p=677"},"modified":"2012-06-07T15:40:21","modified_gmt":"2012-06-07T14:40:21","slug":"check-if-your-linkedin-password-was-in-the-list","status":"publish","type":"post","link":"http:\/\/trigonakis.com\/blog\/2012\/06\/07\/check-if-your-linkedin-password-was-in-the-list\/","title":{"rendered":"Check if your Linkedin password was stolen"},"content":{"rendered":"<p>As you all probably  heard, there were some stolen passwords from Linkedin this morning (<a href=\"http:\/\/blog.linkedin.com\/2012\/06\/06\/linkedin-member-passwords-compromised\/\" title=\"see here\" target=\"_blank\">announcement<\/a>). A simple way to check if your password belongs to the ones stolen is by using the following script:<\/p>\n<pre lang=\"bash\">\r\n#!\/bin\/bash                                                                                        \r\n\r\nif [ ! -f 'combo_not.txt' ]\r\nthen\r\n    if [ ! -f 'combo_not.zip' ]\r\n    then\r\n        echo \"Downloading the list of sha1s\"\r\n        wget http:\/\/wordpress.phobostechnology.com\/wp-content\/uploads\/2012\/06\/combo_not.zip\r\n    fi\r\n    echo \"Unziping\"\r\n    unzip combo_not.zip\r\nfi\r\n\r\nmine=$(echo -n \"$1\" | sha1sum | cut -d' ' -f1);\r\nmine0=\"00000\"${mine:5};\r\necho \"checking \"$mine\r\necho \" and     \"$mine0\r\necho \"===found:\"\r\ngrep -e $mine -e $mine0 combo_not.txt\r\n<\/pre>\n<p>Do <code>chmod +x<\/code> on the script and then run it placing a space in front, so that the command does not appear in the history of commands.<br \/>\nFor example:<\/p>\n<pre lang=\"bash\">\r\n $  .\/check.sh 123456\r\nchecking 7c4a8d09ca3762af61e59520943dc26494f8941b\r\n and     00000d09ca3762af61e59520943dc26494f8941b\r\n===found:\r\n00000d09ca3762af61e59520943dc26494f8941b\r\n<\/pre>\n<p>PS. Yes, someone is using the password 123456!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As you all probably heard, there were some stolen passwords from Linkedin this morning (announcement). A simple way to check if your password belongs to the ones stolen is by using the following script: #!\/bin\/bash if [ ! -f &#8216;combo_not.txt&#8217; ] then if [ ! -f &#8216;combo_not.zip&#8217; ] then echo &#8220;Downloading the list of sha1s&#8221; [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[7],"tags":[201,200,199],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p1ouW6-aV","_links":{"self":[{"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/posts\/677"}],"collection":[{"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/comments?post=677"}],"version-history":[{"count":8,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/posts\/677\/revisions"}],"predecessor-version":[{"id":685,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/posts\/677\/revisions\/685"}],"wp:attachment":[{"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/media?parent=677"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/categories?post=677"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/trigonakis.com\/blog\/wp-json\/wp\/v2\/tags?post=677"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}