Conversation

Notices

1. Embed this notice
   翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Wednesday, 19-Mar-2025 13:44:12 JST 翠星石
   Clownflare - yes, we know all your passwords; https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/
   • ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Wednesday, 19-Mar-2025 14:09:11 JST 翠星石

     in reply to

     • LisPi
     @lispi314 Obviously they store the passwords themselves in addition to hashing them.
   • Embed this notice
     LisPi (lispi314@udongein.xyz)'s status on Wednesday, 19-Mar-2025 14:09:12 JST LisPi

     in reply to
     @Suiseiseki > Based on Cloudflare's observed traffic between September - November 2024, 41% of successful logins across websites protected by Cloudflare involve compromised passwords.
     
     100%, since they observed them.
     
     Sure they've got some indirection scheme, but it amounts to creating a rainbow table instead of a direct mapping.