Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

If the passwords were encrypted is there really a problem?

I have not used the forum for some time and can't remember the details.

Advice please.

share|improve this question
1  
You can get detailed answer, if you ask this question at Information Security –  saji89 Jul 24 '13 at 4:31
add comment

1 Answer

Even if the passwords are encrypted the PCs these days have become powerful enough to use bruteforce attack on the hash to find the passwords within reasonable time. I myself don't remember the forum password I used to use. So to be on the safer side, it would be prudent to change the password in websites where you feel that you've used the same password.

Update:
Canonical in its statement on the Ubuntu forums home page, has told:

The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.

The use of salt will make it more difficult to find the password from the hash, but still it'll be safer to change the password, wherever required. To know more about Salt, please check out: Salt (cryptography)

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.