logoalt Hacker News

MuffinFlavored • yesterday at 6:25 PM • 1 reply • view on HN

hopefully their hashed/salted passwords, right? not plaintext?


Replies

duskwuff • yesterday at 6:36 PM

Internally, sure. But the application that was (probably) compromised was an FTP client, so it would have received the plain text of those passwords from users as they logged in.

➕ show 3 replies