Slashdot Mirror


Wikipedia Leaks Some Users' Passwords

JJ Budion writes "If you've signed up for an account on Wikipedia.org, you may want to check this page to make sure you're not on there. It seems certain users with identical password hashes can find other user names with the same password, and Wikipedia (despite being alerted) has done nothing about the problem for the last year. A good (although slightly inflammatory) description of the problem can be found here. This is probably a good occasion to remember to use strong passwords (apparently only users with common passwords, like dictionary words, are affected)."

15 of 238 comments (clear)

  1. Well, good for me! by TheRealMindChild · · Score: 4, Funny

    I guess it is a good thing that I use "TheCowJumpedOverMyMotherInLaw" as my password... no one will ever figure that one out

    --

    "When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
    1. Re:Well, good for me! by jx100 · · Score: 2, Funny

      Dammit, I need to change the code on my luggage now!

  2. Wiki-passwords? by pianorain · · Score: 5, Funny

    Bah...you mean that I can't edit other people's passwords too?

  3. I've said it before by Anonymous Coward · · Score: 2, Funny

    and I'll say hit again, hotgrits is not a safe password

  4. the two guys by Anonymous Coward · · Score: 5, Funny

    the two guys with "Ilovetehfatchicks" as their password who showed up on each others list are just looking at each other right now. They know the other guy knows, but nobody else does, so the uncomfortable, pregnant, silence continues.

  5. 1 2 3 4 5 by bestguruever · · Score: 2, Funny

    Cue the spaceballs references ...

    --
    if you think this is bad, you should have seen my last sig
  6. Passwords... by aicrules · · Score: 2, Funny
  7. Re:Saw this on K5 by aicrules · · Score: 2, Funny
    Think they might use the same password on two different systems?

    Not me! You couldn't hack into my account that way! No siree! I always use different passwords for each site that I'm on. That way, even if the site is unscrupulous I have nothing to worry about on the other 500 sites I have accounts on.

    Unfortunately, to remember them all I just use the name of the site as the password for my account.
  8. Whew, I'm safe! by sveskemus · · Score: 2, Funny

    Good thing my password is *********.

  9. Re:Doesn't know diddly about hashing by Anonymous Coward · · Score: 1, Funny

    That looked like a vi command for a second.

  10. Still Waiting by Keystroker · · Score: 0, Funny

    I'm still waiting on who actually uses Wikipedia as their primary source of information. :rollseyes:

    --
    Avarus animus nullo satiatur lucro.
    1. Re:Still Waiting by fredrikj · · Score: 2, Funny

      I'm still waiting on who actually uses Wikipedia as their primary source of information.

      According to this page I found, which seems reliable, "Its articles have been cited by the mass media and academia."

  11. I use my dog's name as my password. by Anonymous Coward · · Score: 2, Funny

    I use my dog's name as my password.
    My dog's name is currently "rV4q-p2", but I change it every 90 days.

  12. Re:Shame on Wiki by Rei · · Score: 4, Funny

    You did your post wrong, and are just asking to have other editors come along and fix it for you. To save this from a hundred edits, I'll go ahead and try to get them all at once:

    If they're going to succeed in portraying Wikipedia as a mature, reliable alternative to traditional encyclopedias, they ought to make damned sure that their ducks are in a row. Their disregard for customer concerns is shameful.

    If, in the long-term, Wikipedia's image is tarnished by this, it is well-deserved.

    See also:
    * Wikipedia (external link)

    --
    Aeris Died For Your Sins.
  13. Obligatory bash.org by nganju · · Score: 3, Funny

    Cthon98> hey, if you type in your pw, it will show as stars
    Cthon98> ********* see!
    AzureDiamond> hunter2
    AzureDiamond> doesnt look like stars to me
    Cthon98> *******
    Cthon98> thats what I see
    AzureDiamond> oh, really?
    Cthon98> Absolutely
    AzureDiamond> you can go hunter2 my hunter2-ing hunter2
    AzureDiamond> haha, does that look funny to you?
    Cthon98> lol, yes. See, when YOU type hunter2, it shows to us as *******
    AzureDiamond> thats neat, I didnt know IRC did that
    Cthon98> yep, no matter how many times you type hunter2, it will show to us as *******
    AzureDiamond> awesome!
    AzureDiamond> wait, how do you know my pw?
    Cthon98> er, I just copy pasted YOUR ******'s and it appears to YOU as hunter2 cause its your pw
    AzureDiamond> oh, ok.

    --
    There are 2 kinds of people in this world. Those that can keep their train of thought,