kpumuk

15 ms·

1. 1.▲
   by kpumuk 13y ago

   Thank you for your suggestion. Not a weakness anymore :)
2. 2.▲
   by kpumuk 13y ago

   We have reset passwords for all affected users. Hashes that got leaked are not useful now.
3. 3.▲
   by kpumuk 13y ago

   Compromised != Hacked. To clarify: no accounts were accessed by the hackers, but small amount of account records have had passwords encrypted with outdated algorithm (basically SHA1 + salt), so we preemptively reset their passwords and sent
4. 4.▲
   by kpumuk 13y ago

   We use scrypt for passwords hashing. This is modern hard to crack password hashing algorithm. We do have database access logs, so it was pretty straightforward to identify which users were affected.
5. 5.▲
   by kpumuk 15y ago

   Definitely put spaces