Anavrin » News » RockYou

RockYou offers widgets for Social Networking sites, and all you need is a account on their site with your login credentials to the which ever sites you want to use it with.

RockYou left their password database on a public accessible site in plain text, and to boot the database was susceptible to SQL Injection. 32 million passwords were exposed in the attack.

Security firm iMPERVA got a copy of the passwords and analyzed the them:

* Half were susceptible to dictionary attacks
* ~33% were less than six characters long
* Most common password: 123456
* Second most common: 12345 followed by 123456789 and Password

Obviously access to your Facebook, MySpace sites isn't the most devastating compromise, but when people use these simple passwords, they probably use it on other more gravely sites.

Tagged as: RockYou, Security, iMPERVA

Anavrin » News » RockYou