3 ms·
> Sure, but the breach was in 2012 Even in 2012, storing passwords unsalted (and probably even hashed just once) was considered bad practice. As was MD5. Bad
by fuzzy2 10y ago
> Sure, but the breach was in 2012
Even in 2012, storing passwords unsalted (and probably even hashed just once) was considered bad practice. As was MD5.
Bad passwords being bad passwords also goes without saying. 123456 was never a good password.
- tripzilch 10y agoYou don't even need a breach to hack 123456, I expect it to be in every pentester's top20 first-tries (contingent on whatever profile they have on the target, obviously).