Hacker News: kpumuk

New comment by kpumuk in "Scribd hacked – emails and hashed passwords leaked"

kpumuk — Thu, 04 Apr 2013 16:41:12 +0000

Thank you for your suggestion. Not a weakness anymore :)

New comment by kpumuk in "Scribd hacked – emails and hashed passwords leaked"

kpumuk — Thu, 04 Apr 2013 16:33:49 +0000

We have reset passwords for all affected users. Hashes that got leaked are not useful now.

New comment by kpumuk in "Scribd hacked – emails and hashed passwords leaked"

kpumuk — Thu, 04 Apr 2013 16:31:02 +0000

Compromised != Hacked. To clarify: no accounts were accessed by the hackers, but small amount of account records have had passwords encrypted with outdated algorithm (basically SHA1 + salt), so we preemptively reset their passwords and sent out emails to all affected users.

This is how we define "compromised" - people which had their passwords hash with old algorithm, which is relatively easy to crack.

New comment by kpumuk in "Scribd hacked – emails and hashed passwords leaked"

kpumuk — Thu, 04 Apr 2013 16:16:05 +0000

We use scrypt for passwords hashing. This is modern hard to crack password hashing algorithm.

We do have database access logs, so it was pretty straightforward to identify which users were affected.

New comment by kpumuk in "Poll: Spaces in if statements"

kpumuk — Fri, 12 Aug 2011 02:21:00 +0000

Definitely put spaces