A reason why every site should move past passwords: Kiwi Farms hack. by [deleted] in technology

[–]fizzparentlanguid 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

Administrators of online platforms should take precautions to prevent unauthorized access to their platforms. For instance, I manage a little social networking site. Passwords on my site are 256-bit AES encrypted and salted for further security. This means that even I am unable to read them in their encrypted form. It's not a big deal if they get stolen because the thief will only driving directions be left with meaningless nonsense. Moreover, I do not solicit any kind of personal data from my visitors, thus there is nothing of value on my server that a criminal might steal. I think Josh Moon is too savvy to save passwords in plaintext on his site, therefore I'm crossing my fingers that you misunderstood him.