News for hackers. Stuff that matters.
Re:Scribd hacked – emails and hashed passwords leaked by beachstartup on Thursday April 04, 2013 @04:03PM (#5494915)
Re:Scribd hacked – emails and hashed passwords leaked by harshreality on Thursday April 04, 2013 @06:26PM (#5495676)
Salts make cracking a list of N password hashes take roughly N times as long, but if a password is cracked anyway (because it's common and/or because the hash is not using very many rounds, or because an attacker only cares about one particular account), and the password is reused elsewhere, the fact that it was salted doesn't matter anymore.

GP is right; if owners of the leaked accounts [email, hash] pairs are reusing passwords, the leaked hashes are potentially useful even though scribd has reset them. They're simply not useful for logging in to scribd.

Re:Scribd hacked – emails and hashed passwords leaked by beachstartup on Thursday April 04, 2013 @07:03PM (#5495869)
yeah if you simply know what a password is, of course it's compromised, but you're not supposed to easily break a salted hashed password.
Re:Scribd hacked – emails and hashed passwords leaked by icebraining on Friday April 05, 2013 @05:49AM (#5497481)
Salts only really protect against rainbow tables; if the attacker is willing to use a dictionary or brute force attack against a single password, they're not of much use.