There is always a bigger fish.
this post was submitted on 27 Jul 2023
77 points (98.7% liked)
Technology
59198 readers
2866 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
So was the operator of the website arrested because they released the details themself? Is that what's implied?
Looks like he was arrested for all the other cyber crimes he was committing. It doesn't say he wasn't the "leak" but also doesn't imply it either.
Ah thanks. The way the short HIBP message is phrased made it sound like the events may have been connected.
You hear about so many places getting breached that have now leaked out hashed passwords. At least this site had the foresight to use a modern hashing algo like argon2. So many have had weak hashes and could at least take a page out of proper hashing from this. They could have misconfigured argon2 properties but I’m thinking that as long as they at least used the default method, it will give the decent protection from cracking.
We still say “pwned”?
That is the name of the website linked... I hate the word/phrase, but, it is what it is now.
How good is argon2?
It seems to be the most recommended password hashing algorithm at the moment (https://en.wikipedia.org/wiki/Argon2), although this will depend on the version actually used, and the configuration parameters. If they use at least the standard recommendation, it is currently impractical to crack a strong password.