News for hackers. Stuff that matters.

A comment on ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users.

Re:ParkMobile Breach Exposes License Plate Data, Mobile Numb... by hunter2_ on Wednesday April 21, 2021 @10:38PM (#26898134)
> a fairly robust one-way password hashing algorithm called bcrypt, which is far more resource-intensive and expensive to crack than common alternatives like MD5

MD5 is still common for password hashes? That can't seriously be true anymore.

[ Parent | on HN ]
Re:ParkMobile Breach Exposes License Plate Data, Mobile Numb... by tyingq on Thursday April 22, 2021 @08:22AM (#26901900)
It's believe it's still the default for Wordpress and SugarCRM.
[ Parent | on HN ]
Re:ParkMobile Breach Exposes License Plate Data, Mobile Numb... by WrtCdEvrydy on Wednesday April 21, 2021 @11:19PM (#26898364)
to be honest, bcrypt is awesome when upgrading in place since it can rotate your md5 passwords as people log in / out.
[ Parent | on HN ]