4 ms·
>Unless you presume that you know the salt your comment is utter nonsense. Usually the attacker will also know the salts in a breach of this type, unless the c
by alasdair_ 7y ago
>Unless you presume that you know the salt your comment is utter nonsense.
Usually the attacker will also know the salts in a breach of this type, unless the company did something clever with the salts (doubtful since they used MD5).
- ryanlol 7y agoThe fact that the article says “believed to be” strongly suggests that things are not as simple as they’re “believed to be”, because if the passwords were easy to crack that’d be trivial to prove. We don’t know how the passwords are hashed. All we have is a journo guessing.
- deleted 7y ago[deleted]