Possible Data Breach Warning

[grmcdorman]

Seriously? Salting isn't standard practice? It's more than 30 years old, if I recall correctly. Astonishing, I would never consider a password hash without a salt acceptable. Mind you, I've seen a few "roll your own" authentication handling in the past decade, even, that didn't even reach that level. (Roll your own security usually means you end up with none.)

[JayUtah]

It's older than that.  Back in the day, Unix stored its (hashed and salted) passwords in a world-readable file.  And yes, people still do roll their own authentication, from what I've seen.  But since my sample size isn't very large, I wouldn't put any statistical faith in it.

[VQ]

(I vaguely recall rainbow tables from when I watched some online courses on security; is that what they are?)

Yes.