YouPorn passwords available for download, thousands of users exposed
nakedsecurity.sophos.com
YouPorn passwords available for download, thousands of users exposed
1–10 of 90 posts
Re: YouPorn passwords available for download, thousands of users exposed
#2How many sites need to be humiliated like this before people learn to hash passwords with something like bcrypt? It's like two damn functions. You just call them! It's so easy that even a baby squirrel could do it! There is no excuse.
Until then, I hope everyone is using a throwaway password for accounts that can be non-disastrously stolen, and using strong unique passwords for the important ones.
Re: YouPorn passwords available for download, thousands of users exposed
#3How many sites need to be humiliated like this before people learn to hash passwords with something like bcrypt? It's like two damn functions. You just call them! It's so easy that even a baby squirrel could do it! There is no excuse. Until then, I hope everyone is using a throwaway password for accounts that can be non-disastrously stolen, and using strong unique passwords for the important ones.
It'll just take one congressman's e-mail password to be the same as his YouPorn password, then it'll be law to encrypt.
Re: YouPorn passwords available for download, thousands of users exposed
#4Kudos on the double entendre in the title, intentional or not.
Re: YouPorn passwords available for download, thousands of users exposed
#5Why would anyone sign up for a porn site with their main email address? What baffles me even more is how some people actually whip out their credit card and give the digits to a porn site.
Re: YouPorn passwords available for download, thousands of users exposed
#6Re: YouPorn passwords available for download, thousands of users exposed
#7And all this after all the press about them moving their entire stack to Redis etc etc. How can a company achieve such an epic technical feat and have shitty password hashing?
Re: YouPorn passwords available for download, thousands of users exposed
#8Link to the password dump: http://pastebin.com/ieC6eTB7
Re: YouPorn passwords available for download, thousands of users exposed
#9Everything was on http://chat.youporn.com/tmp/ completely open to the public so this is an even bigger screw-up than the fact that they didn't hash their passwords.
Re: YouPorn passwords available for download, thousands of users exposed
#10How do passwords get leaked? Does it mean they were stored in plain text?