Gmail 約500万ユーザー分のメールアドレス・パスワードが流出

Cleaning up after password dumps

One of the unfortunate realities of the Internet today is a phenomenon known in security circles as “credential dumps”?the posting of lists of usernames and passwords on the web.
We’re always monitoring for these dumps so we can respond quickly to protect our users. This week, we identified several lists claiming to contain Google and other Internet providers’ credentials.

We found that less than 2% of the username and password combinations might have worked, and our automated anti-hijacking systems would have blocked many of those login attempts.
We’ve protected the affected accounts and have required those users to reset their passwords.

It’s important to note that in this case and in others, the leaked usernames and passwords were not the result of a breach of Google systems. Often, these credentials are obtained through a combination of other sources.

For instance, if you reuse the same username and password across websites, and one of those websites gets hacked, your credentials could be used to log into the others.
Or attackers can use malware or phishing schemes to capture login credentials.

We’re constantly working to keep your accounts secure from phishing, malware and spam. For instance, if we see unusual account activity, we’ll stop sign-in attempts from unfamiliar locations and devices.
You can review this activity and confirm whether or not you actually took the action.

A few final tips: Make sure you’re using a strong password unique to Google. Update your recovery options so we can reach you by phone or email if you get locked out of your account.
And consider 2-step verification, which adds an extra layer of security to your account. You can visit g.co/accountcheckup where you’ll see a list of many of the security controls at your disposal.

ソース
http://googleonlinesecurity.blogspot.jp/2014/09/cleaning-up-after-password-dumps.html

どうすればいい？

おもふくウザイ

日本語でおｋ

同じユーザー名でいろんなサイト登録したり同じユーザ名パスワードの組み合わせで登録すんなってこと

パスワードは共通部と、サイトごとに変える部分と分ければ良いのに
なぜか全て使い回しする馬鹿が後を絶たない

yes!

またかよめんどくせえ

キングソフトとグーグルではどちらが危険？

pcのGoogle関係ソフトは、mscofigで無効にしている。
ツールバーなどはアインストール。

スマホはiPhoneよりはandroidの方が安全なのでやむを得なく使っている状態か。
因みにiOSは、司法当局向けの純正バックドアが標準的に組み込まれていることが明らかになってニュースになったよな。