MD5 is bad aswell, as explained earlier in this thread.

Ideally you want to use something like bcrypt: http://codahale.com/how-to-safely-store-a-password/

theDragoon

Canada307 Posts

August 12 2011 19:55 GMT

#222

I used an email I never use, and a password that you could consider as a "throwaway" password, meaning I only use it on sites I don't fully trust and don't really care about. But I do use this password pretty much everywhere and I've given it out to some friends already.

-stOpSKY-

Canada498 Posts

August 12 2011 19:56 GMT

#223

I really find it hard to believe that any company would still store personal information in plaintext. What a joke.
Thanks for updating the community R1CH, you are the man!

Shield

Bulgaria4824 Posts

August 12 2011 19:56 GMT

#224

On August 13 2011 04:45 sVnteen wrote:

Show nested quote +

that happens to the best companies

sometimes there is just bad luck

Not encrypting passwords != luck at all
This is stupidity.

Serelitz

Netherlands2895 Posts

August 12 2011 19:56 GMT

#225

Has this happened before? I had someone from south korea access my gmail a few months back when my GOMTV pass was the same as my email's (I tend to cycle my email along with newest passwords so I don't forget it). I made a post about it then in a thread about hacked gmail accounts here.

R1CH

Netherlands10342 Posts

August 12 2011 19:57 GMT

#226

On August 13 2011 04:55 Glowbox wrote:
Ideally you want to use something like bcrypt: http://codahale.com/how-to-safely-store-a-password/

For those curious, this is how TL passwords are stored.

Sneakyz

Sweden2361 Posts

August 12 2011 19:57 GMT

#227

I guess this is a good reason to change my 3 years old blizzard pass XD

vyyye

Sweden3917 Posts

August 12 2011 19:57 GMT

#228

I just remembered that I changed my gom password to some obscure password I really never use, + it has a dummy e-mail. I generally don't use my dummy e-mail or different passwords.
Wow, lucky.

BootySmakaRaX

Japan82 Posts

August 12 2011 19:57 GMT

#229

Protip: never store your customers passwords in rich text files -_-;;

HeIios

Sweden2523 Posts

August 12 2011 19:58 GMT

#230

Glad I used a unique, easy-to-remember password for GOM. Sad to see some kids doing this.

Wombutt

United States159 Posts

August 12 2011 20:00 GMT

#231

is it just the most recent password? or were old ones also stored

VTArlock

United States1763 Posts

August 12 2011 20:00 GMT

#232

O jeez...r1ch I don't understand why you don't just do ALL of the security for the world. At least then someone trustworthy would be in charge.

Crying

Bulgaria778 Posts

August 12 2011 20:01 GMT

#233

On August 13 2011 04:57 R1CH wrote:

Show nested quote +

For those curious, this is how TL passwords are stored.

The difference between TL website and GOMTV is that TL isn't at all vunerable to SQL and i think is really well written(props to the ones that did the site)
However GOM seems bad since its hacked

Someone says MD5 is good way,it is good if the passwords aren't whole words like:mother,sister,football,basketball because every MD5 cracking website already has their MD5's ,however if they are like mmm0007h333R pretty much the MD5 will never get cracked or will take months,years.Hackers dont like waiting XD