Robert Graham argues a reported password issue was not plaintext storage, but a case conversion step before hashing, and notes the message implies the opposite because they cannot recover users plaintext passwords.
Um, no, they are still stored as hashes.
They were just converting text to upper-case before hashing.
There's no reason to believe they stored plain-text passwords.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security