4 ms·
Unless you presume that you know the salt your comment is utter nonsense. The fact that the article says “believed to be” strongly suggests that things are not
by ryanlol 7y ago
Unless you presume that you know the salt your comment is utter nonsense.
The fact that the article says “believed to be” strongly suggests that things are not as simple as they’re “believed to be”, because if the passwords were easy to crack that’d be trivial to prove.
- thenewnewguy 7y agoIf the hash has been leaked then why is there reason to believe the salt _hasn't_ been leaked?
- deleted 7y ago[deleted]
- eterm 7y agoIf the passwords have leaked it's safe to assume the salts have, typically they're stored side by side.
- alasdair_ 7y ago>Unless you presume that you know the salt your comment is utter nonsense. Usually the attacker will also know the salts in a breach of this type, unless the company did something clever with the salts (doubtful since they used MD5).
- ryanlol 7y agoThe fact that the article says “believed to be” strongly suggests that things are not as simple as they’re “believed to be”, because if the passwords were easy to crack that’d be trivial to prove. We don’t know how the passwords are hashed. All we have is a journo guessing.
- deleted 7y ago[deleted]