4 ms·

Your average user has no idea what a hash nor a salt is. There's really no reason for them to include their hashing algorithm in an email like that.

• kmfrk 14y ago
  Technology-savvy users want to be informed and assured as well. Why would they not include it? Situations like these specifically call for not leaving things up to the users' imagination. The recent Facebook incident (well, one of them) created a big scare. Better to control the narrative, before others decide to tell their version of the story.
  • kordless 14y ago
    Where 'their version' == some made up bullshit that sounds good.
  • bitcartel 14y ago
    Also the email doesn't talk about the time-frame: when exactly did Evernote discover this activity and how long might they have been compromised for.