[cbsmith]

Actually, proof that a provocative but false headline on HN will still get the sheep to vote up your article. ;-)

[aiiane]

For the record, the title was actually edited from what I submitted it as.

[cbsmith]

...and it is still wrong. They do hash their passwords.

[aiiane]

Encryption is not the same as hashing.

That said, when I said the title was edited, I was not referring to myself editing it.

[cbsmith]

> Encryption is not the same as hashing.

UPDATE: http://news.ycombinator.com/item?id=4552358

If mrb is right, it looks like they are storing it locally without encryption, which is indeed bad.

What I had written before seeing that:

======================================

Yes it is not. As a consequence, they are not mutually exclusive.

The title would be correct if it said, "Pandora stores encrypted passwords locally". Guess how much less interesting your post would be with that title? ;-)

They hash their passwords. They encrypt their passwords.

I'd prefer they only did the former, but the fact that they do the former at all is NOT what most people commenting on this thread understand.