News for hackers. Stuff that matters.

A comment on Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames. Parent comment

Re:Opensubtitles.org breached – Email addresses, IP addresse... by burai on Wednesday January 19, 2022 @04:05AM (#29991426)
16 years without reviewing password security seems like a massive oversight. A major leak like this it's a high price to pay to learn this lesson.
[ Parent | on HN ]
Re:Opensubtitles.org breached – Email addresses, IP addresse... by foxtrottbravo on Wednesday January 19, 2022 @02:06PM (#29998442)
The really bad thing is that md5 was considered broken in 2005 by security people like Bruce Schneier.

To be fair to them it took till around 2008 for this to become widespread opinion but the signs were on the wall around 2004

[ Parent | on HN ]
Re:Opensubtitles.org breached – Email addresses, IP addresse... by GoblinSlayer on Thursday January 20, 2022 @04:59AM (#30006883)
You believe sha256 would drastically improve password hashing, being a not broken hash function? In 2006 they likely ran php4 and didn't have much choice what hash to use.
[ Parent | on HN ]