Scribd hacked – emails and hashed passwords leaked

Re:Scribd hacked – emails and hashed passwords leaked by the1 on Thursday April 04, 2013 @12:28PM (#5493517)

http://www.scribd.com/password/check thank you for this. now I can run a list of emails against this to see who has scribd account

[ Parent | on HN ]

Re:Scribd hacked – emails and hashed passwords leaked by dopamean on Thursday April 04, 2013 @01:28PM (#5493886)

I just put in a bunch of fake email addresses and they all returned with "Good news - your password has not been compromised." I think the only confirmation that youd get of an existing account is if the password was compromised.

[ Parent | on HN ]

Re:Scribd hacked – emails and hashed passwords leaked by the_french on Thursday April 04, 2013 @12:32PM (#5493546)

They can modify it to simply say whether your account was compromised, regardless of whether you have an account (ie, if no account -> not compromised).

[ Parent | on HN ]

Re:Scribd hacked – emails and hashed passwords leaked by wuest on Thursday April 04, 2013 @12:39PM (#5493584)

...Which they ought to do. Offering the ability to enumerate user accounts is unlikely to be the immediate goal of this utility, but it's an effect nonetheless.

[ Parent | on HN ]

Re:Scribd hacked – emails and hashed passwords leaked by lelandbatey on Thursday April 04, 2013 @01:12PM (#5493781)

30 minutes later and it's fixed. Entering an invalid email also results in a "this email was not compromised" message.

[ Parent | on HN ]

Re:Scribd hacked – emails and hashed passwords leaked by yahelc on Thursday April 04, 2013 @12:45PM (#5493621)

That's what they're doing. "[email protected]" gets a message saying that that account wasn't compromised.

[ Parent | on HN ]