64
Tf happened to lemmy.world? (kbin.social)
submitted 3 years ago* by to c/fediverse@kbin.social
30 comments fedilink hide all child comments
 

Went there and got some… less than savory images. Do not recommend going there.

Did it get hacked or smth?

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 3 years ago (2 children)

Yeah anyone not using randomly generated passwords at this point is just fucking up. I know exactly three of my passwords: the one for my email, the one for my password manager, and the one I'm likely to give out (streaming services and such). The worst anyone can do with the third is cancel my Disney+ or something, and it's really only given to my mom and sisters.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 3 years ago (1 child)

    Is salting password hashes so unknown that neither the lemmy devs nor the kbin dev(s?) have implemented it?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 3 years ago*

    Well this was a JWT compromise, I think, but even still people use really bad passwords all the time. A salt is stored with the user record. The salt's job is to invalidate rainbow tables. If you have a collection of a million bad passwords you can check them all salted in a second or two. Obviously that'll depend on the hashing algorithm to an extent.

  • permalink
  • fedilink
  • source
  • parent