3 ms·
the early evidence is that Yahoo! kept their passwords in the clear and certainly the dump appears to support this Wait, what? I'm no security expert, but how
by patdennis 14y ago
the early evidence is that Yahoo! kept their passwords in the clear and certainly the dump appears to support this
Wait, what? I'm no security expert, but how does that happen?
- sp332 14y agoI don't think so. The only evidence that the passwords were stored in the clear is that some "strong" passwords were broken. But if you look at the LinkedIn dump (which was hashed) there are plenty of strong passwords that were broken.
- sk5t 14y agoThe author, Troy Hunt, keeps extensive lists of actual passwords (millions upon millions gathered mostly from other disclosures). Many "strong looking" passwords turn up in these lists... all sorts of keyboard patterns, numbers tacked onto permuted words in various languages, etc. Of course it's difficult to verify the genuineness of most disclosures like this, unless the victim company decides to fess up.