Quote from: mahun on June 22, 2011, 03:02:40 PM

Quote from: bitsalame on June 20, 2011, 05:28:52 PM

You guys are late to the party.
MtGox's whole user database was compromised.

Since the database has been leaked I will prove it to you:
steve3, you are the customer #52107
Your password hash: !$1$7u9tG3ex$KkKOgkgdJTknIARmG3SBS1

The password has been hashed with FreeBSD salted MD5. It is a tough cookie but not unbreakable.
The salting prevents time-memory trade off (Rainbow Tables), so a dedicated cracker should crack every each one of them individually.
As long as your password is complex and long enough, it will resist cracking by bruteforcing.

Interestingly it seems that your account steve3 were locked back then.
Cheers,

So it is locked, not stolen? How I can check if this password hash = to my password? Is there any online resource to get this type of hash from my password? If it is locked - at least money should be there and I have slight chance.. But when I tried claims.mtgox.com they just told that password incorrect, which I am sure I did correct.

The theory is they will release your account once they verify you. I've sent them the verification info and have received no reply. I'm starting to think it's a scam. Lock all the accounts. Require people to "claim" something they already had. Either ignore people or deny them as often as possible. Profit. I know one person who got his account back right away, but he had no balance in BTC or $$. I've got a small balance of BTC in mine. If my theory is correct no balance would get reclaimed because there is no profit. BTC might be least likely because they aren't money. Don't have a theory on accounts w/ $$, but that might get them in more trouble legally than BTC. It'll be interesting to watch.