LinkedIn password leaks

We want to provide you with an update on this morning’s reports of stolen passwords. We can confirm that some of the passwords that were compromised correspond to LinkedIn accounts. [1]

Are you exposed? Download the hashes and look; the unsalted hashes use SHA-1 encryption so you will need to run your password through an SHA-1 encryption to do the comparison.

What should you do? For starters, change your password. Even if you are not exposed (in this leak) it is clearly time to change your passwords; especially if you reuse passwords across sites.

NOTE: There are password collectors jumping on the linkedin publicity eg “http://www. leakedin. org/” – don’t put your passwords into these sites *Doh!*

LINKS:
[1] An Update on LinkedIn Member Passwords Compromised (2012-Jun-06) [blog.linkedin]
[2] Potential leak of 6.5+ million LinkedIn password hashes (2012-Jun-06) [SANS]
[3] Bad day for LinkedIn: 6.5 million hashed passwords reportedly leaked – change yours now (2012-Jun-06) [Next Web]
[4] LinkedIn confirms hack, over 60% of stolen passwords already cracked (2012-Jun-06) [nakedsecurity.sophos]

Firefox 13.0

Firefox v.13.0 was offered to release channel users on June 05, 2012

What’s New?
* When opening a new tab, users are now presented with their most visited pages
* The default home page now has quicker access to bookmarks, history, settings, and more

Fixed in Firefox 13 [4]
MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer
MFSA 2012-39 NSS parsing errors with zero length items
MFSA 2012-38 Use-after-free while replacing/inserting a node in a document
MFSA 2012-37 Information disclosure though Windows file shares and shortcut files
MFSA 2012-36 Content Security Policy inline-script bypass
MFSA 2012-35 Privilege escalation through Mozilla Updater and Windows Updater Service
MFSA 2012-34 Miscellaneous memory safety hazards

Vulnerability ratings: 4 Critical, 2 High, 1 Moderate
Evaluation: it is time to update again.

LINKS:
[1] Firefox Updated: Firefox 13 (2012-Jun-05) [Mozilla]
[2] Firefox features [Mozilla]
[3] Mozilla Firefox 13.0 Release Notes (2012-Apr-24) [Mozilla]
[4] Security Advisories for Firefox [Mozilla]