[matt_wulfeck]

> The affected information included usernames, email addresses, and hashed passwords - the majority with the hashing function called bcrypt used to secure passwords.

I really appreciate them including this information. It shows they’re following best practices and I don’t need to read the rest of the article with a grain of salt.

[aaronharnly]

Except when you get to the part about “the rest of the passwords were hashed with SHA1”...