3 ms·
Correction on the password part: 3.2 Tumblr used same salt for everybody, but author don't know the salt. He searched the hashed password and found 20 other us
by dracodoc 9y ago
Correction on the password part:
3.2 Tumblr used same salt for everybody, but author don't know the salt. He searched the hashed password and found 20 other users have same password hash, using same password.
3.3 Linkedin leak have no salt, by looking for the 20 other users he found the plain text password, which should be the target password.
3.4 The password no longer worked.
- TeMPOraL 9y agoThanks! Also, when I noticed my typo in the 3.2 ("hash" instead of "salt"), I pretty much hit myself in the head :/.