Sign in / up

back to article Adobe Connect breach pops lid off 'Letmein' logins of gov, army types

A breach of Adobe's Connectusers.com forum database has once again exposed password security foibles, as well as website security shortcomings on Adobe's part. Adobe suspended the forum on Tuesday night in response to the hack, as previously reported. The software developer stressed in a statement that its Adobe Connect web …

COMMENTS

House rules Send corrections
This topic is closed for new posts.
  1. Anonymous Coward
    Holmes

    Forum users use insecure passwords?

    Well I'll go to the bottom of our stairs.

    0 0
  2. Anonymous Coward
    Anonymous Coward

    "Password hashes were not salted to guard against brute force cracking attacks"

    John Leyden, you fail.

    Salting hashes does not protect against brute-force.

    It helps to make the use of rainbow tables more difficult should the entire database be compromised, as in this case.

    1 0
  3. edge_e
    Facepalm

    Adobe, Security issues,

    Really?

    2 0
  4. artbristol
    WTF?

    "MD5, a cryptographic hash function that's known to be insecure."

    MD5's insecurities are nothing to do with its unsuitability for storing passwords; it's failing to salt the password (and to iterate the hash function to slow it down) that's the problem. And the quoted guy is a 'security researcher'?

    0 0
This topic is closed for new posts.

Other stories you might like