4 ms·
So the security experts make no statements on just how completely inept security at LinkedIn was? It's not like it's hard to have salting in your password stora
by quaunaut 14y ago
So the security experts make no statements on just how completely inept security at LinkedIn was? It's not like it's hard to have salting in your password storage. I don't mind that they got hacked so the hashes got stolen- that is gonna happen, and that's gotta be okay.
But it also has to be understood: Anything less than good hashes with good salt is going to be worthless. They used a plain SHA1 hash with zero salt, making it relatively trivial to get through that security 'layer'. It's like an unlocked door.