4 ms·
It is standard practice to include such a statement. If they said you were safe based on their practices, then it turned out there was a bug in their code or a
by 83457 9y ago
It is standard practice to include such a statement. If they said you were safe based on their practices, then it turned out there was a bug in their code or a library that exposed you, that would be really really bad.
- MichaelGG 9y agoSalting is irrelevant to making such a statement. For instance, some users probably have their password set to "zomato1234" or "passw0rd" or (anything in the next 10000+ most common password patterns). Salted or not, it's very feasible to perform that kind of analysis on the leaked data, find weak passwords, then use them with that user's account on other sites.