this post was submitted on 27 Jul 2023
77 points (98.7% liked)

Technology

59198 readers
2866 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
77
BreachForums Pwned, exposing 212k records including usernames, IP and email addresses, private messages between site members and passwords stored as argon2 hashes (haveibeenpwned.com)
submitted 1 year ago by [email protected] to c/technology
10 comments fedilink hide all child comments
 

BreachForums

In November 2022, the well-known hacking forum "BreachForums" was itself, breached. Later the following year, the operator of the website was arrested and the site seized by law enforcement agencies. The breach exposed 212k records including usernames, IP and email addresses, private messages between site members and passwords stored as argon2 hashes. The data was provided to HIBP by a source who requested it be attributed to "breached_db_person".

Breach date: 29 November 2022

Date added to HIBP: 26 July 2023

Compromised accounts: 212,156

Compromised data: Email addresses, IP addresses, Passwords, Private messages, Usernames

comment: I guess the hackers aren't so lucky with their DMs either.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 3 points 1 year ago (1 children)

How good is argon2?

[โ€“] [email protected] 2 points 1 year ago

It seems to be the most recommended password hashing algorithm at the moment (https://en.wikipedia.org/wiki/Argon2), although this will depend on the version actually used, and the configuration parameters. If they use at least the standard recommendation, it is currently impractical to crack a strong password.