News for hackers. Stuff that matters.
Re:Slack was hacked by rifung on Friday March 27, 2015 @01:49PM (#9277886)
While technically true, this seems like it would be computationally infeasible, or at least impractical, given that they were not just hashing but also salting the passwords.

Of course, I barely know anything about computer security, but at least it should prevent attacks using rainbow tables I think?

Re:Slack was hacked by MichaelGG on Friday March 27, 2015 @02:01PM (#9277982)
No, a simple password like "slack123" should be easy to crack with any usable password storage method.
Re:Slack was hacked by nevir on Friday March 27, 2015 @03:27PM (#9278501)
Not necessarily easy. If they're using a decently high cost for their use of bcrypt, we're talking hours to days (or more) per user, even when only considering weak passwords like that.
Re:Slack was hacked by rifung on Friday March 27, 2015 @03:42PM (#9278570)
True, I guess it's possible to crack a password for a single user, especially one with a weak password. I was more thinking that it's unlikely they'll be able to crack the passwords of everyone who was in their database, and given that Slack has so many users it's unlikely for any single person that his/her password will be cracked.

Of course, even if they can't steal everyone's passwords, maybe the hackers will try to crack the passwords of higher profile targets.

Re:Slack was hacked by nitrogen on Saturday March 28, 2015 @12:13PM (#9281871)
GPUs are fast enough to crack a very large percentage of passwords in a short time by brute force, if a simple algorithm was used, even with salt.
Re:Slack was hacked by coldcode on Friday March 27, 2015 @02:34PM (#9278217)
With a separate salt for each password not even the NSA can crack that (that we know of). With a single salt for all of them, maybe.
Re:Slack was hacked by nevir on Friday March 27, 2015 @03:23PM (#9278478)
Sure they can. Anyone can. It just takes a long time per password to crack (that time is a function of the cost/# of rounds of the hashing function).