Dropbox employee’s password reuse led to theft of 60M+ user credentials

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by franciscop on Wednesday August 31, 2016 @02:17AM (#12396343)

> "it does not appear that the encryption protecting them has been cracked"

Please Techcrunch, you are making it sound like you are talking about actual encryption while you are really talking about hashing. From that sentence people would believe that it takes a single "crack" to get them all.

The magic of bcrypt (and hashing in general) is that probably some low-hanging fruits have been picked already while any non-trivial password remains secure.

[ Parent | on HN ]

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by fizbin on Wednesday August 31, 2016 @08:28AM (#12397748)

And worse, when you actually need to talk about someone screwing up and encrypting passwords (see http://www.xkcd.com/1286/ ), this mis-education of your readers will have to be carefully undone first.

[ Parent | on HN ]