Theoretically speaking of course ;)
If my home instance gets hacked, what’s the worst case scenario for my personal data?
deleted by creator
PM is a misnomer since it’s not really private. Direct message or DM would be more correct, on Lemmy, DM as if it would be shown in public.
Don’t forget email address if you have one for account recovery purposes
[This comment has been deleted by an automated system]
How does it not get PMs?
Are those local per device only?
[This comment has been deleted by an automated system]
What is a matrix account?
[This comment has been deleted by an automated system]
Email and hashed password. If you’re like most people and use the same password everywhere, they gain access to everything if they manage to crack it.
Thank you automatically created Bitwarden password.
My paranoia about data breaches has gone down so much since I started using email aliases and a password manager
Glad I don’t reuse passwords.
I always wonder about this though. Are hackers really going to manually test out my password in miscellaneous sites? How would they know what sites to try? And why me along the hundreds of thousands of passwords they would have stolen with mine? Seems like that’s something they would do if they’ve targeted a particular person, not if they’ve stolen a whole dump of credentials
They create giant databases of every breached password in rainbow tables from previously breached password hashes, and then try them all if they ever expose another breach. If they get a database in a breach they can try a lot, like trillions, very fast.
Re-using passwords makes things much easier for them.
Bots attempt passwords on sites’ login forms all the time but aren’t very effective. Usually have hundreds a day even when I had a wedding site not even listed on google. Probably only works for very short and frequently used passwords.
Does lemmy use a salt?
One would hope so.
Nothing. Everything your instance has is your IP address (mostly useless) and password hash (also mostly useless). Everything you have here is public. Maybe except your settings, like light/dark mode.
Password hashes are only useless if you have a good password to begin with.
If not, they can likely get your actual password from it if you re-use passwords etc.
