Ashley Madison's Passwords Cracked, Soon To Be Released

New submitter JustAnotherOldGuy writes with some news that might worry anyone caught up in the Ashley Madison data breach. ("Uh-oh," he says.) Now, besides any other possible repercussions of having one's name on the list of account holders, there's a new wrinkle. The passwords used to secure those accounts were theoretically robustly protected with bcrypt. However, as Ars Technica reports, That assurance was shattered with the discovery of the programming error disclosed by a group calling itself CynoSure Prime. Members have already exploited the weakness to crack more than 11 million Ashley Madison user passwords, and they hope to tackle another four million in the next week or two. This would matter much less if passwords weren't so frequently re-used.

Comments

Re:Ashley Madison is for cows.

[PPH]

Damn! They cracked my password already.

Re:How it was done

[RabidReindeer]

What I'd find interesting is how many accounts used their wife's name as the password.

Re:How it was done

[Smidge204]

How else would they be able to remember it?

Their wives' names, I mean...
=Smidge=

Re: See who changes their password in the coming w

[I'm New Around Here]

Nevermind that, she's missing her period.