LinkedIn: No Reports of Unauthorized Account Access in Wake of Hack
LinkedIn beefs up security after passwords leaked
Salts are designed to ensure that the generated hash is different even if the same password is being hashed. The larger the salt, the more different hashes exist for the same passwordTy Millerchief technology officer, Pure hacking
The company also revealed that passwords of the service's users are now salted as well as hashed. "That transition was completed prior to news of the password theft breaking on Wednesday," Silveira wrote.
Ty Miller, chief technology officer of penetration testing firm Pure hacking, said that although the salting of password hashes has been around for a long time, "we find that many Web applications either do not hash their passwords at all, or use common hashing algorithms, such as MD5, without a salt".
"Social and professional networking sites such as LinkedIn are major targets for hackers," Miller said. "Combining this with the complexity of these types of web applications, the chance of a critical vulnerability being present is likely. This means that a defence-in-depth approach should be a necessity for LinkedIn, which includes protecting passwords with strong cryptographic methods."
The company also revealed that passwords of the service's users are now salted as well as hashed
Miller said that social networking services such as LinkedIn store a wealth of personal information about their users and have a responsibility to implement a very high standard of security, with security measures, such as salting password hashes, implemented as part of application design.
Salting a password makes it less likely an account will vulnerable to hackers using rainbow tables, which are essentially dictionaries of hashes that allow someone to discover what a user's unencrypted password is.
"Salts are designed to ensure that the generated hash is different even if the same password is being hashed," Miller said. "The larger the salt, the more different hashes exist for the same password. This generally means that Rainbow Tables are not a feasible option for cracking salted hashes because there are too many combinations to create.
"This means that attackers have to rely on dictionary-based password attacks, which has to calculate every possible salted hash for each password in the password dictionary. This means that weak passwords will be able to be cracked easily, and stronger passwords are more likely to remain secured."
They came, they saw, and they walked away. That seems to be the story of Nokia’s unsuccessful attempt to sell its Chennai mobile manufacturing plant, which has been frozen over the Rs 21,000 crore tax dispute.
Software behemoth Google may be the next big player to hop on to the IoT bandwagon. Google has developed a software that can run on low power devices, and help them communicate with connected devices.
Canadian based smartphone company BlackBerry Ltd announced that it is planning to buy back 2.6 percent of its shares and plans to propose a new employee share purchase program at its annual meeting in June.
Lenovo's recent acquisitions have taken a bite out of the company's earnings, with its net profit in the first quarter dropping 37 percent despite strong PC sales.