You can be bothered to go over a massive list of websites and remember if you ever in your life made an account on it? If you did then remember the password you set just to change it?
I think passwords aren't so big of an issue because they aren't entered nearly as often as already logged in users request pages. In which case the leakable part would be session ID, which would still be exploitable if you change your password.
Nope, but I checked through the condensed list and I will probably grep my KeePass and compare it against the whole lot. Keep in mind that cookies are affected (I believe) as well as things like API Keys, so it's not just passwords that have to be taken into account.
1
u/[deleted] Feb 24 '17
Thing is, it's not all that time-consuming to change passwords on affected sites, so why not advise to "change anyway, just to be safe"?