The comment thread on Reddit, which the article references, is definitely worth reading. There's some good discussion about the difficulties involved in upgradi

The comment thread on Reddit, which the article references, is definitely worth reading. There's some good discussion about the difficulties involved in upgrading people's hashes to use a more secure system (eg: http://www.reddit.com/r/WTF/comments/f96w7/amazon_security_flaw_wtf/c1e9750 http://www.reddit.com/r/WTF/comments/f96w7/amazon_security_f...)