News for hackers. Stuff that matters.

A comment on Knuddels: Chat platform must pay after hacker attack fine. Parent comment

Re:Knuddels: Chat platform must pay after hacker attack fine by invisiblea on Thursday November 22, 2018 @10:21AM (#18510463)
That list is very out of date. One of my clients appears on there and when we took over in 2012 we encrypted all their user credentials.
[ Parent | on HN ]
Re:Knuddels: Chat platform must pay after hacker attack fine by whyever on Thursday November 22, 2018 @12:15PM (#18511180)
Their FAQ [1, 2] suggests that using an encrypted password still warrants an entry.

[1] http://plaintextoffenders.com/faq/devs

[2] http://plaintextoffenders.com/faq/non-devs

[ Parent | on HN ]
Re:Knuddels: Chat platform must pay after hacker attack fine by ygra on Thursday November 22, 2018 @10:27AM (#18510505)
Encrypting passwords isn't really much better, though, is it? It's still reversible as there has to be a key somewhere.
[ Parent | on HN ]
Re:Knuddels: Chat platform must pay after hacker attack fine by bausshf on Monday November 26, 2018 @06:29AM (#18532567)
Well you took over and did a terrible job.

Hash passwords, not encrypt.

An encryption is reversible, a hash result isn't.

[ Parent | on HN ]