News for hackers. Stuff that matters.
Re:Nvidia Hacked by cshimmin on Friday July 13, 2012 @05:02AM (#4238942)
From their email to users: "As a precautionary measure, we strongly recommend that you change any identical passwords that you may be using elsewhere."

I suppose it's a good idea, as a "precautionary" measure. But is this their way of admitting to hashing without salt...?

Re:Nvidia Hacked by reidrac on Friday July 13, 2012 @05:11AM (#4238969)
No, unless they're lying. The submitted page says "hashed passwords with random salt value".

That doesn't mean they're doing it right, but it's a good start point.

Re:Nvidia Hacked by ars on Friday July 13, 2012 @05:30AM (#4239024)
Since they were hacked it's possible that the logins were intercepted in flight. (Add something to the login code to log all passwords, or email them.)

So the hackers may have captured all the passwords of anyone who logged in while they had control of the site. Because of that it's a good idea to change your password if you've used it elsewhere.