• shiftymccool@piefed.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    28 days ago

    Copying and pasting doesn’t prove your point. HOW did they get the plain text password? Hashes aren’t reversible so they must be stored in plain text or are encrypted in a reversible fashion which is an amateur move as well. Either way, they somehow had access to the user’s password which is a huge no-no

    • Cypher@aussie.zone
      link
      fedilink
      English
      arrow-up
      0
      ·
      28 days ago

      Cracking hashed passwords is possible and not particularly special. Common tools for this are Hashcat and John the Ripper.

      It is most likely these passwords were improperly stored but there are methods available that will easily break most users passwords.