> I actually imagine that their very gifted developers are running around wondering how they themselves didn't audit this. or perhaps its that some 3rd party c

> I actually imagine that their very gifted developers are running around wondering how they themselves didn't audit this. or perhaps its that some 3rd party can authenticate users using sha1 passwords i.e. that internally linkedin passwords are scrypted or something, but this dump was from MitM between 3rd party plugin and linkedin?