xkcd: 562k Accounts breached according to haveibeenpwned
1–10 of 16 posts
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#2I'm one of them :/
The haveibeenpwned description says password hashes are md5, which sucks. But phpBB has used bcrypt by default since version 3.1 (2014)... I wonder if all the hashes are md5 or only those for older accounts?
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#3This sucks. But on the bright side, we can expect an XKCD comic about it in the future.
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#4I'm one of them :/ The haveibeenpwned description says password hashes are md5, which sucks. But phpBB has used bcrypt by default since version 3.1 (2014)... I wonder if all the hashes are md5 or only those for older accounts? https://haveibeenpwned.com/PwnedWebsites#XKCD
Impacted as well, but I'm happy to be part of it. Either they'll crack an old password or, more likely, this is a new style password and they waste a lot of cracking time on it. Using a password manager for everything except a few offline things and my bank account was definitely the right move.
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#5I wonder how many of those passwords are correcthorsebatterystaple
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#6Who has an 'account' with xkcd? Confused.
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#7Who has an 'account' with xkcd? Confused.
They have forums where you can discuss the comics and other things.
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#8I'm one of them :/ The haveibeenpwned description says password hashes are md5, which sucks. But phpBB has used bcrypt by default since version 3.1 (2014)... I wonder if all the hashes are md5 or only those for older accounts? https://haveibeenpwned.com/PwnedWebsites#XKCD
Impacted as well, but I'm happy to be part of it. Either they'll crack an old password or, more likely, this is a new style password and they waste a lot of cracking time on it. Using a password manager for everything except a few offline things and my bank account was definitely the right move.
What do you use for your bank account?
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#9Who has an 'account' with xkcd? Confused.
Looks like there is a forum for the site, which is now down due to the breach. I had no idea it existed, let alone had half a million accounts.
Re: xkcd: 562k Accounts breached according to haveibeenpwned
#10Who has an 'account' with xkcd? Confused.
[deleted]