Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Friday May 31 2019, @04:11AM   Printer-friendly
from the another-day-another-hack...-hack-a-day? dept.

Flipboard Database Hacks Exposed Users' Account Information:

News aggregator app Flipboard said Tuesday it fell victim to hacks that exposed and possibly allowed users' account information to be copied for about nine months.

The information revealed in the hack includes users' names, Flipboard user names, encrypted passwords and email address, according to Flipboard. No Social Security numbers, credit card information or other financial data was revealed, as the app doesn't collect that information.

"As a precaution, we have reset all users' passwords, even though the passwords were cryptographically protected and not all users' account information was involved," Flipboard said in an FAQ. Users will have to create a new password the next time they try to log in to their account.

Additionally, all digital tokens used to connect to third-party accounts have been replaced or deleted to prevent misuse, the company said.

[...] The company said in April 2018 it had 145 million monthly users.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Friday May 31 2019, @05:18AM

    by Anonymous Coward on Friday May 31 2019, @05:18AM (#849652)

    Encrypted and hashed are completely different things. Hashes are one way, where as encrypted data can be decrypted. That being said, the actual press release from Flipboard says:

    Flipboard has always cryptographically protected passwords using a technique known by security experts as “salted hashing”.

    I'm guess whoever read "cryptographically protected passwords" &"salted hashing" and wrote "encrypted passwords" didn't know the difference between encrypting and hashing.