# % of members to lose $ due to this hac k? **URL:** \ **Category:** In My Humble Opinion\ **Created:** [January 10, 2014, 11:38pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483 "2014-01-10T23:38:10Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\ **Post date:** [January 10, 2014, 11:38pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/1 "2014-01-10T23:38:10Z")
Have any been reported as hacked yet? What % will be hacked & actually lose $ from an account, bank or otherwise where their is actual money? How many members will have a fraudulent CC charge due to this SDMB hack? ---
**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\ **Post date:** [January 10, 2014, 11:40pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/2 "2014-01-10T23:40:24Z")
Would a mod please fix that space in my title? Thanks. ---
**Author:** ![Inner\_Stickler](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/inner_stickler/32/318_2.png) [@Inner\_Stickler](https://boards.straightdope.com/u/Inner_Stickler)\ **Post date:** [January 10, 2014, 11:45pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/3 "2014-01-10T23:45:01Z")
How could there be fraudulent CC charges? ---
**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\ **Post date:** [January 10, 2014, 11:54pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/4 "2014-01-10T23:54:43Z")
> [@Inner\_Stickler](#): > > How could there be fraudulent CC charges? Is not an email addy & a possible screen name and if you use a pattern type PW all that is needed? With a credit card account password, & your account name from the SDMB hack if you used the same email or nickname (gusnspot ) could they get the card number and use it to make purchases? 😕 ---
**Author:** ![bobot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bobot/32/21622_2.png) [@bobot](https://boards.straightdope.com/u/bobot)\ **Post date:** [January 10, 2014, 11:57pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/5 "2014-01-10T23:57:12Z")
My prediction is 0% (+ or - .0001%) ---
**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\ **Post date:** [January 11, 2014, 12:01am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/6 "2014-01-11T00:01:51Z")
The SDMB may not have anyone’s CC info, but most people are lazy and will use the same user ID and password combination everywhere they can. That’s where the real hazard comes in - people break into systems like this one, then go out to credit card and banking sites with all of the IDs and passwords to see what works ---
**Author:** ![Procrustus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/procrustus/32/2994_2.png) [@Procrustus](https://boards.straightdope.com/u/Procrustus)\ **Post date:** [January 11, 2014, 12:01am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/7 "2014-01-11T00:01:53Z")
so, some hacker gets my email address and the password I use here. I don’t see how they’d get my credit card number. ---
**Author:** ![GusNSpot](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/gusnspot/32/436_2.png) [@GusNSpot](https://boards.straightdope.com/u/GusNSpot)\ **Post date:** [January 11, 2014, 12:15am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/8 "2014-01-11T00:15:56Z")
Can’t they just stick the screen name or email addy into a login place on where you check your CC account & put in the password they have. It comes back & says the PW is incorrect. They now know they have the correct ID so they pull the next series of PW they have generated until they get in? May have to retry several times after waiting for the site to set but eventually?? ---
**Author:** ![Siam\_Sam](https://avatars.discourse-cdn.com/v4/letter/s/d78d45/32.png) [@Siam\_Sam](https://boards.straightdope.com/u/Siam_Sam)\ **Post date:** [January 11, 2014, 12:17am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/9 "2014-01-11T00:17:20Z")
This makes me glad I’m an old fuddy and have never engaged in Internet banking. An ATM is as hi-tech as I get. Credit cards are another matter, but I’ve been hit with fraud before, and the company never makes me pay. ---
**Author:** ![Ferret\_Herder](https://avatars.discourse-cdn.com/v4/letter/f/e47774/32.png) [@Ferret\_Herder](https://boards.straightdope.com/u/Ferret_Herder)\ **Post date:** [January 11, 2014, 12:21am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/10 "2014-01-11T00:21:20Z")
This is why they tell you to NEVER duplicate passwords between accounts. ---
**Author:** ![Hello\_Again](https://avatars.discourse-cdn.com/v4/letter/h/85e7bf/32.png) [@Hello\_Again](https://boards.straightdope.com/u/Hello_Again)\ **Post date:** [January 11, 2014, 12:33am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/11 "2014-01-11T00:33:56Z")
> [@GusNSpot](#): > > Can’t they just stick the screen name or email addy into a login place on where you check your CC account & put in the password they have. It comes back & says the PW is incorrect. They now know they have the correct ID so they pull the next series of PW they have generated until they get in? May have to retry several times after waiting for the site to set but eventually?? If that’s the way your CC works, you definitely need a new bank. I don’t know of a financially based site that specifies whether you failed your password or your login. My CC just says “your login or password is incorrect” then locks you out after three tries. And the lockout doesn’t just unlock itself after a few minutes (what site would do that, ever??). So, no. ---
**Author:** ![Quimby](https://avatars.discourse-cdn.com/v4/letter/q/22d042/32.png) [@Quimby](https://boards.straightdope.com/u/Quimby)\ **Post date:** [January 11, 2014, 1:04am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/12 "2014-01-11T01:04:14Z")
Also the passwords were encrypted were they not? ---
**Author:** ![SeaDragonTattoo](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@SeaDragonTattoo](https://boards.straightdope.com/u/SeaDragonTattoo)\ **Post date:** [January 11, 2014, 2:45am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/13 "2014-01-11T02:45:12Z")
I highly doubt any measurable percentage of Dopers have bank user ID’s that are the same as their Dope screen name, or even the same email associated with their Dope account. That would be super hella stupid, and kinda weird. Even if they did, I would hope that by now they have changed any passwords associated with the same user names. And yes, as mentioned above, the websites usually just say that either the username or password is incorrect, but not which one. Personally, I have no concern. ---
**Author:** ![dzeiger](https://avatars.discourse-cdn.com/v4/letter/d/46a35a/32.png) [@dzeiger](https://boards.straightdope.com/u/dzeiger)\ **Post date:** [January 11, 2014, 4:03am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/14 "2014-01-11T04:03:07Z")
> [@Quimby](#): > > Also the passwords were encrypted were they not? Not with anything that isn’t almost trivial for modern methods to crack. The ATMB thread has a couple of people reporting that they have Twitter accounts that used the same password suddenly started following a bunch of new accounts. So it looks like passwords have been cracked and sold to at least one criminal organization. ---
**Author:** ![Senegoid](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/senegoid/32/6606_2.png) [@Senegoid](https://boards.straightdope.com/u/Senegoid)\ **Post date:** [January 11, 2014, 4:20am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/15 "2014-01-11T04:20:55Z")
> [@SeaDragonTattoo](#): > > Even if they did, I would hope that by now they have changed any passwords associated with the same user names. And yes, as mentioned above, the **websites usually just say that either the username or password is incorrect, but not which one.** If you try to log in to this very SDMB with a bad password, it says: > [@](#): > > You have entered an invalid username or password. Please press the back button, enter the correct details and try again. Don’t forget that the password is case sensitive. Forgotten your password? Click here! And yes, one certainly hopes that ALL computer accounts, web or otherwise, would work this way. This practice goes way back before the Internet, by the way. ---
**Author:** ![ColdPhoenix](https://avatars.discourse-cdn.com/v4/letter/c/6bbea6/32.png) [@ColdPhoenix](https://boards.straightdope.com/u/ColdPhoenix)\ **Post date:** [January 11, 2014, 9:33am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/16 "2014-01-11T09:33:37Z")
> [@gotpasswords](#): > > The SDMB may not have anyone’s CC info, but most people are lazy and will use the same user ID and password combination everywhere they can. That’s where the real hazard comes in - people break into systems like this one, then go out to credit card and banking sites with all of the IDs and passwords to see what works You appear suspiciously knowledgeable about this subject… :screwy: ---
**Author:** ![GuanoLad](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guanolad/32/42_2.png) [@GuanoLad](https://boards.straightdope.com/u/GuanoLad)\ **Post date:** [January 11, 2014, 11:30am UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/17 "2014-01-11T11:30:56Z")
> [@Ferret\_Herder](#): > > This is why they tell you to NEVER duplicate passwords between accounts. Remembering 70 different passwords that have to be changed every time some moron hacks into a site is completely impractical for most people. ---
**Author:** ![Bill\_Door](https://avatars.discourse-cdn.com/v4/letter/b/50afbb/32.png) [@Bill\_Door](https://boards.straightdope.com/u/Bill_Door)\ **Post date:** [January 11, 2014, 12:15pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/18 "2014-01-11T12:15:04Z")
> [@GuanoLad](#): > > Remembering 70 different passwords that have to be changed every time some moron hacks into a site is completely impractical for most people. They don’t expect you to do it, they tell you to do it so they can say “told ya so” if something like that happens. ---
**Author:** ![Antigen](https://avatars.discourse-cdn.com/v4/letter/a/848f3c/32.png) [@Antigen](https://boards.straightdope.com/u/Antigen)\ **Post date:** [January 11, 2014, 2:57pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/19 "2014-01-11T14:57:32Z")
> [@GuanoLad](#): > > Remembering 70 different passwords that have to be changed every time some moron hacks into a site is completely impractical for most people. I keep mine in a little book in my desk at home. I figure if someone’s breaking into my house, they’re going to take my _stuff_, not sit at my computer and try to get into my bank account. It’s the onine bad guys who are trying to get at my passwords, and they can’t see into my book. So I use different, secure passwords everywhere, and refer to my book when I need to. ---
**Author:** ![Canadjun](https://avatars.discourse-cdn.com/v4/letter/c/76d3ee/32.png) [@Canadjun](https://boards.straightdope.com/u/Canadjun)\ **Post date:** [January 11, 2014, 3:10pm UTC](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483/20 "2014-01-11T15:10:44Z")
> [@GuanoLad](#): > > Remembering 70 different passwords that have to be changed every time some moron hacks into a site is completely impractical for most people. If you don’t want to use a password manager, then at least make sure anything requiring high security (e.g. bank account ids and passwords) bears no relation to anything requiring low security (e.g. SDMB). I can assure you that even before this current incident if you got my SDMB password it would only help you get on to a couple of other sites that I consider **very** unimportant, and to even do that you would have to find those other sites. [Next page](https://boards.straightdope.com/t/of-members-to-lose-due-to-this-hac-k/678483.md?page=2)