Is my password here been hashed?
-
Oook, this is not a site feedback, because i think/guess my password already hashed by a standard security process by Xoops…
I ask this because (maybe all you guys don’t know), few days before, a chinese website named CSDN (China Software Developper Network) got a big trouble: their database leaked out to the public (Before that, only few hacks have those data :S), all user’s username, email addr, AND plaintext password has been leaked to public… total more than 6,000,000 users. I’m one of them.
Few days later, i changed all my password, and i think this disaster should be the past … and i even download the CSDN database for count what password i must avoid to use … but i’m wrong: another website’s leaked: the renren.com (a facebook-like website in China), this time, 20,000,000 users.
I curiously download the database (OK, you know…i should’t do it…), test some username and password: It’s FUXXXK LOGGED IN. So, the database is real leaked.
And it’s not end…i simplely counted the total number of leaked account, and result is: If you are a Chinese and you like to browsing web, your password already public known.
BUT so far, you will grousing “I’m not chinese, and i never register those fuxxking stupid website”. I of course known that, but if it will not hit you guys any bit, i will not post this stuff here.
The hacker, we don’t know who is publish a screenshot…and i marked something you may interested:
I hope this just a fake threat, but for safe, please change your password and use unique password on different website.
-
Yeah, most sites (this one included) have hashed passwords. I wouldn’t worry about the likes of facebook or hotmail.
-
FriendlyFire wrote:
Yeah, most sites (this one included) have hashed passwords. I wouldn’t worry about the likes of facebook or hotmail.I know, but for safe, change it is better.
As i know, the discuz.net in the screenshot also hased password. I waiting them to leak that file, so i will know if them found the way to unhash password to plaintext.
-
If somebody can decypher a hashed and salted password, we have far bigger worries than your password being revealed.
-
Now I want hasbrowns.
-
You can know the algorithm all you want, a robust algorithm is one where you can have all the pieces and still be unable to crack it, which is what most widely used hashing algorithms do.