eHarmony

An analysis of passwords stolen from eHarmony and leaked to the Web recently reveals several problems with the way the dating site handled password encryption and policies, according to a security expert.

The biggest problem clearly was that the passwords, although encrypted and obscured with a hashing algorithm, were not "salted," which would have increased the amount of work password crackers would need to do, writes Mike Kelly, a security analyst at Trustwave SpiderLabs, in a blog post today.

But there were two other less obvious problems. First, the lowercase characters in passwords were converted to uppercase before … Read more

Three companies have warned users in the last 24 hours that their customers' passwords appear to be floating around on the Internet, including on a Russian forum where hackers boasted about cracking them. I suspect more companies will follow suit.

Curious about what this all means to you? Read on.

What exactly happened? Earlier this week a file containing what looked like 6.5 million passwords and another with 1.5 million passwords was discovered on a Russian hacker forum on InsidePro.com, which offers password-cracking tools. Someone using the handle "dwdm" had posted the original list and … Read more

It's time to pony up for prepaid iPhones, avoid password scams and drop that mayor obsession:

The iPhone is coming to Virgin Mobile at the end of June. But you'll have to drop a hefty $650 to get the iPhone 4S, since there's no two-year contract. Plans start at $30 a month. It's cheaper in the long run to go prepaid with this plan instead of spending $200 upfront and paying for a more expensive monthly bill for two years (but you'll be limited with talk minutes). Virgin is on the Sprint network.

If Android … Read more

The dating Web site eHarmony got hit by the same group that released a list of LinkedIn member passwords yesterday, so be sure to change your passwords for both if you have accounts.

Buzzfeed also parsed through the list of leaked passwords to reveal some pretty depressing sentiments from employees. While many accounts used overly simplistic passwords like "LinkedIn" or "password1," some of the more disturbing pass phrases include things like "suicide," "solonely," "iwishiwasdead," and "divorce." They're still not very strong in terms of security, so be sure to add a special character or a number during the bleak changeover.… Read more

Dating site eHarmony confirmed today that passwords used by its members were compromised following reports of references to the site among allegedly stolen passwords that were posted to a hacker site.

"After investigating reports of compromised passwords, we have found that a small fraction of our user base has been affected. We are continuing to investigate but would like to provide the following actions we are taking to protect our members," Becky Teraoka, spokeswoman for eHarmony, wrote in a blog post. "As a precaution, we have reset affected members passwords. Those members will receive an email with … Read more

Great news for our live listeners--the stream is back! Please bear with the short delay that allows the stream to buffer.

We'll keep working on it, and in the meantime we put together a great show for you today with fun stories about a dummy politician citing an article from The Onion, the pitfalls of online dating, prototype headphones with built-in proximity sensors, and a conceptual McDonald's ad campaign that uses seedbombs!… Read more

You might be one of those who has been taken aback today that Facebook's Mark Zuckerberg is, according to an interview Bill Gates gave to the Daily Mail, now engaged.

You might therefore wish to renew your efforts to find the wealthy lover of your dreams online. Fortunately there is a YouTube video that is currently underlining some of the stresses of creating an online video profile.

It has, indeed, so moved the world's lonely and forlorn that it has already enjoyed more than 4 million views.

The video purports to be part of an eHarmony profile. It … Read more

Online dating site eHarmony is advising some of its customers to change their passwords due to a security breach.

A hacker employed an SQL injection vulnerability in an ancillary site that eHarmony operates for content management. The hacker obtained a file that included user names, e-mail addresses, and "hashed passwords," eHarmony said. The breach--first reported today on the Krebs on Security blog--affected an informational site called eHarmony Advice, which includes message boards that require eHarmony user names and passwords to access.

The dating service's main site uses separate databases and Web servers, and "at no point … Read more

Have you lost hope?

Are you sick of slogging away on sites such as Match.com and eHarmony.com to find the partner of your dreams? Or at least the partner who will put up with your dead lizard collection, your back hair, and your difficult morning breath?

Then perhaps it is time to be honest with yourself. Perhaps it is time to look in the mirror and decide that you should be at the Ugly Bug Ball. Or, more accurately, on it.

The Ugly Bug Ball is a dating site for those who are aesthetically challenged. That is the … Read more