8 comments

[ 3.4 ms ] story [ 25.8 ms ] thread
The title of the article makes it clear that these are not 183M Gmail passwords, but that Gmail passwords are a part of the leak.

"Gmail Passwords Confirmed As Part Of 183 Million Account Data Leak"

By the article's logic, I just exhaled 5 * 10^18 kg of carbon dioxide into the earth's atmosphere.
Some apps reset your password automatically (send you a password reset email) if they detect it has been leaked.

But email services appear to have a harder problem due to the catch 22 where you can't log in to reach the password reset email if they were to reset your password.

What do they do?

I skimmed the article. I skimmed several of the linked articles. No one says the source of the credentials, other than where people are buying and selling them. Where are google login credentials coming from? Malware I assume and nothing to do with a problem at google?
Uh oh. For a long time I've been giving myself the excuse that the only reason why I keep using Gmail is security - Google has never had these kind of breaches.

The argument is no longer valid, time to move off Gmail.