News for hackers. Stuff that matters.

A comment on FTC takes action against CafePress for data breach cover up. Parent comment

Re:FTC takes action against CafePress for data breach cover up by inetknght on Monday June 27, 2022 @03:14PM (#31899358)
> they didn't keep hashes, so they could go off and use all the various algos (sha, md5 etc) then see where else those users were members (by looking for password if they were dumb enough), I wonder how often that happens in the corporate world

https://en.wikipedia.org/wiki/Credential_stuffing

Indeed, it's a major problem.

[ Parent | on HN ]
Re:FTC takes action against CafePress for data breach cover up by dontbenebby on Monday June 27, 2022 @03:36PM (#31899673)
Oh yeah I know the re-use is common, I more meant the technique of purposefully not hashing or disabling hashing to compare hashes across services and connect users.
[ Parent | on HN ]