Chinese Developer Forum Leaks 6 Million User Credentials

Posted by timothy on Thursday December 22, 2011 @03:57AM from the it's-curtains-for-you-elizabeth-my-dearbook dept.

gzipped_tar writes "The 'Chinese Software Developer Network' (CSDN), operated by Bailian Midami Digital Technology Co., Ltd., is one of the largest networks of software developers in China. A text file with 6 million CSDN user credentials including user names, password, emails, all in clear text, got leaked to the Internet. The CSDN has issued a letter of apology to its users. In the letter, it is explained that passwords created before April 2009 had been stored in plain text, while later passwords were encrypted. Users created between September 2010 and January 2011 may still suffer from email address leaks. A summary of the most frequent passwords without the corresponding usernames is available at GitHub. Somewhat surprisingly, the cryptic sounding password 'dearbook' ranks 4th with 46053 accounts using it."

3 of 102 comments (clear)

Min score:

Reason:

Sort:

Re:'dearbook'? by Anonymous Coward · 2011-12-22 04:14 · Score: 5, Informative

dearbook.com.cn is a chinese online technical book retailer owned by CSDN.
Re:Before April 2009 by OverlordQ · 2011-12-22 04:19 · Score: 4, Informative

So you have to check in your code if an account has been created before and after 04/2009, and do different actions to check their credentials upon that? Yuuuck.
Mediawiki is (re: was) like that. When it changes password schemes it detects which version the pw is stored in, authenticates using that (older) method and then upgrades you to the new format.

--
Your hair look like poop, Bob! - Wanker.
Re:some thing to do with dearleader? by cyfer2000 · 2011-12-22 04:29 · Score: 4, Informative

it's an online book store.

--
There is a spark in every single flame bait point.