Comment Comment by psycr Every single time this happens, I immediately wonder: "what was the hashing scheme?"Like many others before it, Scribd disappoints by not addressing this question. Instead we get this:Even though this information was accessed, the passwords stored by Scribd are encrypted (in technical terms, they are salted and hashed).How long was the salt? AFIK, MD5 hashes with an insufficiently long salt can be bruteforced with open sourced CUDA setups.Further, how did they determine the following?Most of our users were therefore unaffected by this; however, our analysis shows that a small percentage may have had their passwords compromised. parent psycr 13 years ago
Like many others before it, Scribd disappoints by not addressing this question. Instead we get this:
Even though this information was accessed, the passwords stored by Scribd are encrypted (in technical terms, they are salted and hashed).
How long was the salt? AFIK, MD5 hashes with an insufficiently long salt can be bruteforced with open sourced CUDA setups.
Further, how did they determine the following?
Most of our users were therefore unaffected by this; however, our analysis shows that a small percentage may have had their passwords compromised.