Polytron and Phil Fish Hacked, tons of Personal Info Leaked

[Lawlight]

NiKKoM said:

Lawlight said:

NiKKoM said:

Password encryption is a pretty big joke on a wordpress (think polytron was a wordpress site) site.. heck I do it from time to time for some websites if for example the old webmaster has died and no one has the admin password. All the user accounts can be exposed fairly easily.. and since most people use the same password for a lot of sites..

Allow me to be skeptic of this. And again, passwords to what?

passwords of the site users accounts.. wordpress uses a md5 encryption.. if they got to the database the password is stored like

21232f297a57a5a743894a0e4a801fc3

then it easy to reverse the hash to a word http://www.hashkiller.co.uk/
 

I would expect them to add a salt to the password. Also, there was no login on that website.