Replies (2)

• @stepheneb@ruby.social 2026-05-22 12:24

  @mastodonmigration@mastodon.online @jaz@toot.wales @Nonilex@masto.ai One possibility (mentioned earlier in thread) is a weak password. A variant of the weak password problem is using the same password for many services. When one service is hacked AND isn’t properly using encrypted password hashes that info can be used to test a users other accounts.

  Open ##5200075

• @mackuba@martianbase.net 2026-05-23 01:29

  @mastodonmigration@mastodon.online @jaz@toot.wales @Nonilex@masto.ai I know of at least one person I somewhat recognized from the site who got hacked (they emailed me asking for help to get the account restored) - they said they stupidly had reused a password that was used elsewhere for their Bluesky account and didn't set a 2FA, so probably that password was found in some leaked darknet bundle or something. I'm assuming this is the main way they're doing it

  Open ##5200076