[Bish0pQ]

Apperently on the 20th of october DailyMotion got hacked. It was reported by LeakedSource monday. 85 million accounts were stolen, so if you use DailyMotion, change your passwords.

Article: Click here for the article

Opinions?

[Pikami]

At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes

[mothered]

At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes

Yes, storing user-credentials In plain text Is just sheer stupidity.

During my exploitations, you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.

[Pikami]

At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes

Yes, storing user-credentials In plain text Is just sheer stupidity.

During my exploitations,  you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.

Oh, I believe you, lots of websites still store passwords in plain text and anything can be exploited if you have enough resources. That's how everything works. It's just nice to see a company that uses great hashing techniques for storing passwords instead of using MD5 witch isn't even created for password hashing...

[Oni]

At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes

Yes, storing user-credentials In plain text Is just sheer stupidity.

During my exploitations, you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.

We use Bcrypt as well.

[Seventh]

Better question of why Dailymotion though..... I mean its use is quite substandard compared to its competitors.

[Bloody Eye]

Never used Dailymotion. I don't know any entertainers that do.

[mothered]

We use Bcrypt as well.

That's nice to know and certainly good practice.

The security of one's credentials on a given website may not only relate to that site alone, hence If It's compromised and (for example) the same email address and password Is used on other sites, then they'll also be at risk. I've actually come across one victim who used the same login details on more than 20 Individual websites.

[Bish0pQ]

Never used Dailymotion. I don't know any entertainers that do.

Me neither, I was kind of surprised when I read there were 80 million users. I thought nobody used that shit (scammers do, but that's about it).

[Mew]

Yeah it was, it sucks.
I know a lot of people who use it for SEO stuff