3253
Comments (207)
sorted by:
You're viewing a single comment thread. View all comments, or full comment thread.
28
NullifyAndSecede 28 points ago +30 / -2

Sounds like there was an SQL injection vulnerability in gab that allowed them to get access to a bunch of data including password hashes.

17
PurestEvil 17 points ago +17 / -0

Luckily password hashes aren't much valuable to crack them. Well, they allow one to iterate through a whole lot of potential passwords without having a server to respond to it if they know the algorithms. So they are convenient, but possibly insufficient.

3
slopede 3 points ago +4 / -1

Care to explain more? Are you talking about common password databases a.k.a rainbow tables? It looks like they did just that.

3
walt 3 points ago +3 / -0

If the hashes are properly salted rainbow tables are not a problem.

This just allows them to attempt brute forcing individual passwords without being rate limited.