3 ms·

There are UNSALTED md5 hashes in there.

• judofyr 15y ago
  Ehm, how we you know that? Maybe the salts were stored another place? Or simply the attacker didn't release them? Or maybe MtGox used a site-wide salt that's stored in their codebase somewhere? EDIT: Okay, they appear to be unsalted (according to nbpoole): http://news.ycombinator.com/item?id=2671714 http://news.ycombinator.com/item?id=2671714
  • nbpoole 15y ago
    http://news.ycombinator.com/item?id=2671714 http://news.ycombinator.com/item?id=2671714 (Summary: Because you can Google at least some of the hashes and find they're already cracked)
  • lubos 15y ago
    open that file and search for the most famous MD5 hash - 5f4dcc3b5aa765d61d8327deb882cf99
    • ahi 15y ago
      Fortunately they all look like test accounts.
    • hugh3 15y ago
      Meaning what?
      • dekz 15y ago
        That is the md5 digest of 'password'