Slashdot Mirror


Hashing Email Addresses For Web Considered Harmful

cce writes "The MicroID standard, despite getting thrashed soundly by Ben Laurie two years ago, has since been recommended by the DataPortability Project and published on the user profiles of millions of users at Digg and Last.fm. MicroID is basically a hash calculated using a user's profile page URL and registered email address, producing a token that makes the email address vulnerable to dictionary attacks. To see how easy it was to crack these tokens, I conducted a small study, choosing 56,775 random Digg users, and cracking the email addresses of 14,294 of them (25%) using just their MicroID, username, and a list of popular email domains. Digg has more than 2 million users, and that means half a million of them — mostly people who had never heard of MicroID, and had probably not logged in for a long time — had their email addresses exposed to this trivial attack. I also applied this attack to Last.fm (19%) and ClaimID (34%). Digg and Last.fm have since removed support for MicroID, but the lesson is clear: don't publish a hash of my email address online, guys!"

2 of 155 comments (clear)

  1. Re:All I Know by Anonymous Coward · · Score: -1, Flamebait
    The common African nigger(Niggerus Vulgaris) is a humanoid species which is known for its gorilla-like build and its distinctive languages and aromas.

    They were integrated into American society in the late 1950's/early 1960's and have since evolved into a complex, symbiotic existence with the more evolved homo sapiens species. Blacks do, however, posess attributes which may be deemed as beneficial; and these include superhuman build. Famed football coach Jimmy the Greek once famously noted that,

    "...blacks were bred for strength and speed from slave days, that if blacks took over coaching positions, there would be nothing left for whites, and that blacks have a physical advantage over whites because of their thigh size."

    They are known also for their larger-than-average penis size and bellicose demeanor which ensure their survival and beat out their competition.

    This is all too evident as shown by the high incidence of other species' females increasingly leaving their own color and choosing male mates belonging to the niggerus vulgaris species because of the genetic advantages of having mixed-race offspring.

    Niggerus vulgaris species' distinctive vocalition may sometimes mimic that of American English; for example, the rhyming "Fo-Sho" is an indicator of agreement but also showcases niggerus vulgaris' tendency to speak in rhyme whenever possible. A good example of the aforementioned phenomenon is the most recent all-niggerus Pizza Hut commercial, which depicts a family of niggerus calling and responding a collaborative poem in preparation of the feast. Their diet includes a wide variety of fruits(watermelon), vegetables(fried cabbage and collard greens), meat(fried chicken, chitterlings), and grains.

  2. fuCK! by Anonymous Coward · · Score: -1, Flamebait

    leg1timIse doing