Massive Epic Celebrity Nude Leak

[Melfster]

google security is a joke just like icloud security.   It amazing how easy it is get into some one android phone.

[+Warwagon MVC]

These Celebs need better passwords

 

mJ}FrO]t-MCjH)B-G&` anyone?

 

a celeb you'd think they would realize they are going to be the target of attack and for god sake keep your nude photos in something like like a trucrypt container, not the god damn cloud.

 

Having said that, Jennifer Lawrence does have nice ######.

[Orange Battery]

I think 'epic' should be removed from the English language.

[Torolol]

I think 'epic' should be removed from the English language.

now that you mentioned, it should've 'ePic' not 'epic', electronic-picture.

[Sonne]

I'm an old man. So old in fact, I refuse to acknowledge the word "fap".

 

 

The BBS boards are that way grandpa  :woot:

[+E.Worm Jimmy Subscriber¹]

The BBS boards are that way grandpa  :woot:

 

 

ha. bulletin boards and 14.4k Modem (2400 baud)     

 

[taim]

ha. bulletin boards and 14.4k Modem (2400 baud)     

 

 

We should have a dial up day where participating websites limit their upload per visitor to dial up speeds, Throwback Internet.  :D

[Dot Matrix]

As a warning, it's going around now that some of the images might have been taken at a time when some of the people were underage.

[Krome]

I think 'epic' should be removed from the English language thread title.

There...

 

[Jaybonaut]

Ariana Grande? Who cares? That's like looking at a naked 12 year old.

 

She's 21 according to Wiki anyway.

[Draconian Guppy]

As a warning, it's going around now that some of the images might have been taken at a time when some of the people were underage.

and? :shifty:  what's underage any way :P Laws vary by country

[Nagisan]

and? :shifty:  what's underage any way :p Laws vary by country

While true, "underage" is not the same as age of consent. For example, in the US it is illegal for any person under the age of 18 to view, or perform in, a pornographic film, even if the age of consent is (for example) 16 in that state.

 

I'm sure other countries have their own laws pertaining to minimum age for someone to view, or perform in, pornography (photography included), and it's not always the same as age of consent (or even age of majority, which is the age you are legally considered a adult).

[Dot Matrix]

and? :shifty: what's underage any way :P Laws vary by country

And? It's illegal, buddy.

[Luc2k]

And? It's illegal, buddy.

Does that mean, that according to US law, the underage girl is also guilty of production and possibly distribution (if she sent them to someone) of child porn?

[+Frank B. Subscriber²]

And? It's illegal, buddy.

You realise that not everything that's illegal in the US is illegal in other countries, right?

I don't condone the photo leak. But going 'Oh no, she was only 17 when the photo was taken - avert your eyes!' is downright ridiculous.

[timster]

Does that mean, that according to US law, the underage girl is also guilty of production and possibly distribution (if she sent them to someone) of child porn?

yes. lock her up and treat her like a real criminal. because hurrr durrr it's the law and we most follow every single law to a tee!

 

*not sure if you caught the sarcasm, but I was being sarcastic.

[HawkMan]

These Celebs need better passwords

 

mJ}FrO]t-MCjH)B-G&` anyone?

 

a celeb you'd think they would realize they are going to be the target of attack and for god sake keep your nude photos in something like like a trucrypt container, not the god damn cloud.

 

Having said that, Jennifer Lawrence does have nice ######.

 

what do you think is the safer password,, that impossible to remember mess you put up there or "onedaythehorseateallthecheeseforthewin"

[Skiver Veteran]

what do you think is the safer password,, that impossible to remember mess you put up there or "onedaythehorseateallthecheeseforthewin"

 

Given all of this you can question the safety around it also but.... Soemthing like LastPass generates random passwords based on how you set it so that you don't need to remember it.

 

However to truly answer your question, in the world of decrypting passwords, the quoted password as far as my eyes can tell have no repeating letters (case differences do make a difference) whereas yours does, therefore if someone's method decrypted the first character, they can then safely work out at least another 2 from the entire password. I'm not working it all out however I suspect by getting to roughly half way they would have the vast majority if not all of your password decrypted completely.

 

So yes, his is safer. People seem to think that passwords are "guessed" where more often then not they are decrypted from a websites own password vault. in which I know I've said elsewhere related to this topic, when you couple that with people using the same passwords for mulitple sites means it gets very easy to get access to other things like iCloud for instance.

[Praetor]

Given all of this you can question the safety around it also but.... Soemthing like LastPass generates random passwords based on how you set it so that you don't need to remember it.

 

However to truly answer your question, in the world of decrypting passwords, the quoted password as far as my eyes can tell have no repeating letters (case differences do make a difference) whereas yours does, therefore if someone's method decrypted the first character, they can then safely work out at least another 2 from the entire password. I'm not working it all out however I suspect by getting to roughly half way they would have the vast majority if not all of your password decrypted completely.

 

So yes, his is safer. People seem to think that passwords are "guessed" where more often then not they are decrypted from a websites own password vault. in which I know I've said elsewhere related to this topic, when you couple that with people using the same passwords for mulitple sites means it gets very easy to get access to other things like iCloud for instance.

 

actually, no; according to Gibson (https://www.grc.com/haystack.htm) the password Hawkman posted is not only easier to remember but also safer because it has more characters, meaning the space to search is much, much bigger then the Warwagon one. And it has less entropy as well.

[Skiver Veteran]

actually, no; according to Gibson (https://www.grc.com/haystack.htm) the password Hawkman posted is not only easier to remember but also safer because it has more characters, meaning the space to search is much, much bigger then the Warwagon one. And it has less entropy as well.

 

Using that website, and unless I have missunderstood, it's aimed at brute forcing which is lets take a bunch of passwords and guess. So it's saying if you had an application that would come up with structures it would take longer yes.

 

But if you read what I wrote I'm talking about the ability of decrypting passwords, something that would be used IN a brute force attack. So we are technically talking two different things.

[Praetor]

Using that website, and unless I have missunderstood, it's aimed at brute forcing which is lets take a bunch of passwords and guess. So it's saying if you had an application that would come up with structures it would take longer yes.

 

But if you read what I wrote I'm talking about the ability of decrypting passwords, something that would be used IN a brute force attack. So we are technically talking two different things.

 

The fact that the password Hawkman posted has 38 characters and a search space of 6.11 x 10^53 makes it extremely difficult to decrypt; the Warwagon one, on the other hand, as "only" 19 characters but a higher entropy (85) then Hawkman's (26); still the search space is less (4.61 x 10^36).

 

Both are very strong, but one is much more easier to remember :)

[HawkMan]

the quoted password as far as my eyes can tell have no repeating letters (case differences do make a difference) whereas yours does, therefore if someone's method decrypted the first character, 

 

Doesn't really matter, how would they know they decrypted the first letter ? 

 

the only way to decrypt the password is to decrypt the whole thing, the decryptor doesn't know there is no special characters and because of it's length it needs to be brute forced, that means, it has to start with a single letter password(well probably 4 but for simplicity) it needs to check that character against every single possibility, then it has to go to two characters, and check every single possibility of the first one with every single possibility on the second one.  

 

Now witht he amount of characters in that password. without a quantum computer of some significance, you're not going to be able to break it. 

 

As for lastpass, that's all well and good, but what when you have to log into a service on a device/system where lastpass isn't a possibility, say... oh iCloud on your iDevice ;)

[Setnom]

I'm so very sorry that this happened to women I really like, like Jennifer Lawrence or Kate Upton. Privacy is important.

Nevertheless, as a man I don't feel ashamed to say I was delighted to see the pictures. Those two women are beautiful.

[Skiver Veteran]

Doesn't really matter, how would they know they decrypted the first letter ? 

 

the only way to decrypt the password is to decrypt the whole thing, the decryptor doesn't know there is no special characters and because of it's length it needs to be brute forced, that means, it has to start with a single letter password(well probably 4 but for simplicity) it needs to check that character against every single possibility, then it has to go to two characters, and check every single possibility of the first one with every single possibility on the second one.  

 

Now witht he amount of characters in that password. without a quantum computer of some significance, you're not going to be able to break it. 

 

As for lastpass, that's all well and good, but what when you have to log into a service on a device/system where lastpass isn't a possibility, say... oh iCloud on your iDevice ;)

 

Maybe my understanding of password decryption tools are wrong but I was under the impression the tools were smart enough to work out when more than one character were the same therefore knowing that once it's got one character, if there are others with the same value then it makes a safe assumption to repeat that part, therefore making it quicker.

 

I've not used LastPass for Android but I know it's available so I would assume it's available for iOS too which would give you the answer to your iDevice :). Sure it's a premium feature but given the nature of this topic, these victims can probably afford it! In fact I bet LastPass would probably jump at the chance to get anyone of these on board as a "I know use LastPass" to secure my data kinda advertisement and offer it for free.

[cork1958]

i hope this will tarnish cloud reputation even more :laugh:.

And I seriously hope to see various lawsuit due this breach :rofl:.

 

I just loves seeing big corps getting sued.

 

No doubt. Always thought that cloud crap was one of the dumbest things ever, but everybody is falling all over themselves to think it's the coolest thing ever!