Re:Dropbox employee’s password reuse led to theft of 60M+ us...
by skyrw on Wednesday August 31, 2016 @04:53AM
(#12396914)
I know the article explicitly and consistently says 'encryption' everywhere. I simply cannot fathom that they were encrypting instead of hashing. While I suppose it's possible that the SHA-1 versions were encrypted, I refuse to believe that the dropbox security team would transition from that to bcrypt 2-directional encryption over bcrypt 1-directional hashing. With that assumption I find it safe to say the tech journalist is being inaccurate.
[ Parent
| on HN ]
There are no comments on this comment yet.