Gravatar数据泄露与Discourse:我们的用户应该担心吗?

From

Gravatar

In October 2020, a security researcher published a technique for scraping large volumes of data from Gravatar, the service for providing globally unique avatars . 167 million names, usernames and MD5 hashes of email addresses used to reference users’ avatars were subsequently scraped and distributed within the hacking community.

Breach date: 3 October 2020
Date added to HIBP: 5 December 2021
Compromised accounts: 113,990,759

看起来破解大多数 MD5 哈希值花了将近一年。不,这不会影响您的用户。

6 个赞