4 ms·
Troy Hunt's analysis: https://www.troyhunt.com/the-dropbox-hack-is-real/ https://www.troyhunt.com/the-dropbox-hack-is-real/
by runesoerensen 10y ago
Troy Hunt's analysis: https://www.troyhunt.com/the-dropbox-hack-is-real/ https://www.troyhunt.com/the-dropbox-hack-is-real/
- jsmthrowaway 10y agoIt was pretty neat to read Troy's line there about sending emails out near the end, raise an eyebrow, tap over to my inbox and hear an immediate and satisfying ding. I highly recommend the HIBP service, hiding your e-mail from showing up in public searches (important for opsec), and donating whatever you can to Troy. Truly essential service and I'd be happy to pay more. Even with good password discipline it's useful knowledge on your exposure.
- raingrove 10y ago~It's pretty shocking that the SHA1-hashed passwords weren't salted.~ Edit: I misread the article. It says the leaked hashes were salted, but the leak didn't include the salts.
- runesoerensen 10y agoAre you referring to "the bcrypt accounts include the salt whilst the SHA1 accounts don't"? I think he's saying that the leak didn't include the salts.
- deleted 10y ago[deleted]