|
|
|
|
|
by jaitsu
3678 days ago
|
|
What makes this even worse is the fact that they're trying to cover up just how bad this really is. LinkedIn use(d) the sha1 hashing algorithm (see: http://arstechnica.com/security/2012/06/8-million-leaked-pas...) which is easily breakable through rainbow tables when not used with a salt (which LinkedIn failed to use). The sha1 hash has been known to be cryptographically insecure since as early as 2007 (https://www.schneier.com/blog/archives/2005/02/cryptanalysis...). The very fact that LinkedIn reset everyone's passwords backs this up. After this data leak I deleted my account, not only is LinkedIn destroyed the art of recruitment it has been completely irresponsible with user's data. |
|
Apparently there is no nuke it from orbit option.