News for hackers. Stuff that matters.

A comment on Disqus Security Alert: User Info Breach. Parent comment

Re:Disqus Security Alert: User Info Breach by pwg on Friday October 06, 2017 @07:55PM (#15421337)
Which is what the article says Discus did, they moved /from/ sha1 /to/ bcrypt in 2012. Same as the companies you helped, in 2012.
[ Parent | on HN ]
Re:Disqus Security Alert: User Info Breach by tylersmith on Friday October 06, 2017 @08:00PM (#15421358)
No, those companies did not use SHA1 in 2012 or any time close to then. They used bcrypt until they upgraded to scrypt.

SHA1 was useless for passwords long before then.

[ Parent | on HN ]