5 ms·
If they had talked about storing unsalted passwords in the first place, this whole thing may not have happened because somebody would have told them, "Hey, that
by jlarocco 14y ago
If they had talked about storing unsalted passwords in the first place, this whole thing may not have happened because somebody would have told them, "Hey, that's dumb" before the leak.
- larrys 14y agoWe're talking about a major corporation here. They can pay for and hire the appropriate security experts (even more than one firm) and find something like that out.
- jlarocco 14y agoIf they weren't competent enough to do that before, what makes you think they're competent enough to do it now? For all we know, they've "fixed" the issue by switching to unsalted MD5 password hashes.
- andrewcooke 14y agoand how would you know, if they don't explain what they did?