2 ms·
From their email to users: "As a precautionary measure, we strongly recommend that you change any identical passwords that you may be using elsewhere." I sup
by cshimmin 14y ago
From their email to users:
"As a precautionary measure, we strongly recommend that you change any identical passwords that you may be using elsewhere."
I suppose it's a good idea, as a "precautionary" measure. But is this their way of admitting to hashing without salt...?
- reidrac 14y agoNo, unless they're lying. The submitted page says "hashed passwords with random salt value". That doesn't mean they're doing it right, but it's a good start point.
- ars 14y agoSince they were hacked it's possible that the logins were intercepted in flight. (Add something to the login code to log all passwords, or email them.) So the hackers may have captured all the passwords of anyone who logged in while they had control of the site. Because of that it's a good idea to change your password if you've used it elsewhere.