Unimaginative eHarmony Passwords Hacked, Too

LinkedIn isn't the only password hacking victim this week. Add eHarmony to the list. About 1.5 million encrypted passwords were posted online by a hacker, along with the 6.5 million from the business networking site, reports Ars Technica. The dating site has confirmed a breach, but it seemed pretty obvious given that hundreds of those posted contained the strings "eharmony" or "harmony," notes Ars Technica.

The bad news is that the 8 million posted from the two sites are probably just a fraction of those stolen, say security experts. The BBC, meanwhile, says some LinkedIn users already are reporting phishing scams in which emails that appear to come from the site actually direct them to a site selling counterfeit meds. And ZDNet notes that the author of an algorithm (MD5) used by commercial sites to protect passwords says his program is "no longer considered safe." (More LinkedIn stories.)