PSA: Yahoo Accounts Hacked? Perhaps Gmail & others as well?

Read this on Ars http://arstechnica.com/security/2012/07/yahoo-service-hacked/

Ars avoided linking anything direct (ie hacked file) in the article, but there are links in the comments section, including this text list http://d33ds.co.nyud.net/archive/yahoo-disclosure.txt

I am not sure if that file is legit or not, or if it contains data from more than one exploit?  It seems to list information for Gmail, Yahoo, and more.

I would (I did) change passwords any Yahoo accounts that you have, might consider for Gmail and others in that text file linked above as well.

If you want to understand more about passwords and computer/Net Security see Steve Gibson's Haystacks & Needles (Understanding Passwords).

For more on what a Hacker can do see "Lessons Learned from Cracking 2 Million LinkedIn Passwords"

Edited to add this link shows other Blogs & News Sites covering this issue http://www.blogrunner.com//snapshot/D/2/1/hackers_expose_453000_credentials_allegedly_taken_from_yahoo_service/