4 ms·
Is this real? Scary. How could they get the plain text passwords?
by general_failure 12y ago
Is this real? Scary. How could they get the plain text passwords?
- deleted 12y ago[deleted]
- yen223 12y agoIt could be from reused passwords from prior unrelated password leaks, or it could be a sign of very poor security at Dropbox. My money's on the former.
- nickodell 12y agoPerhaps they obtained the hashes, then tried bruteforcing them, and only published the ones that they actually found.
- codezero 12y agoThe general pattern here is some other large site (or sites) is hacked and their passwords are either not salted, or stored in plaintext, and the people reused the same email/password combo.
- Patrick_Devine 12y agohttp://en.wikipedia.org/wiki/Rainbow_table http://en.wikipedia.org/wiki/Rainbow_table Usually a salt would protect you from that, but look at how trivially easy all those passwords are.
- nitrogen 12y agoBecause of brute force GPU cracking, you need more than a salt. You need bcrypt/scrypt/PBKDF2. Edit: due to the downvote, I'll remind the audience about this: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/
- wmt 12y agoBy tricking people with a droqbox.com, dropbox.com.77130.cn, "increase your dropbox size" or something similar. At least that would way easier than actually hacking dropbox.