Re:Scribd hacked – emails and hashed passwords leaked
by beachstartup on Thursday April 04, 2013 @07:03PM
(#5495869)
yeah if you simply know what a password is, of course it's compromised, but you're not supposed to easily break a salted hashed password.
Re:Scribd hacked – emails and hashed passwords leaked
by icebraining on Friday April 05, 2013 @05:49AM
(#5497481)
Salts only really protect against rainbow tables; if the attacker is willing to use a dictionary or brute force attack against a single password, they're not of much use.
GP is right; if owners of the leaked accounts [email, hash] pairs are reusing passwords, the leaked hashes are potentially useful even though scribd has reset them. They're simply not useful for logging in to scribd.