4 ms·
What's the point of these tools that let you know whether Gawker's database held my email address? It's no secret that I have a Gawker account, and a Twitter ac
by mjs 16y ago
What's the point of these tools that let you know whether Gawker's database held my email address? It's no secret that I have a Gawker account, and a Twitter account, and a Facebook account... What I would like to know is how likely it is that my password could be compromised. How were the passwords stored? Hashed? Salted and hashed?
- brown9-2 16y agoBecause some of us don't remember if we have an account on the site and might not be able to download a ~500mb torrent to verify if we do/did.
- visakhcr 16y agoJust go to Gawker site and try the link "Forgot Password". If your email is not registered with Gawker, it will tell you the same.
- brown9-2 16y agoThis sounds like a bad idea if the site is still comprimised.
- mjs 16y agoIf you do have an account but your password is not a dictionary word and it's been hashed and salted, do you care?
- cjdavis 16y agoIt is very, very easy. The first 8 characters of your password were hashed using DES without a salt. Your cell phone has enough CPU to crack them all.