Read if you're on GrowDIaries....and Change your Passwords

[bellumromanum]

Sorry wasn't sure the right area to put this in but it's relevant to the community. I work in Cyber Security so this obviously got my attention. For reference I could crack an MD5 hash in minutes utilizing GPU acceleration and a couple basic techniques. Anyways...

Configuration snafu exposes passwords for two million marijuana growers

Passwords for GrowDiaries users were stored using the weak MD5 hashing function, putting customer accounts at risk of attacks.

www.zdnet.com

 

[redshift75]

this was pointed out back in april on grow diaries and they didnt seem to care. Was about when i left. Think it was the RQS monthly photo contest it was brought up in.

 

[bellumromanum]

this was pointed out back in april on grow diaries and they didnt seem to care. Was about when i left. Think it was the RQS monthly photo contest it was brought up in.

Exposed Kibana instances and S3 buckets are 101 /facepalm

 

[bellumromanum]

this was pointed out back in april on grow diaries and they didnt seem to care. Was about when i left. Think it was the RQS monthly photo contest it was brought up in.

Might still check have I been pwnd to make sure bro - sounds like a lot of that was cached user data

 

[Aqua Man]

@logic

 

[logic]

Ouch thats some very bad security right there

 

[Kanzeon]

Sorry wasn't sure the right area to put this in but it's relevant to the community. I work in Cyber Security so this obviously got my attention. For reference I could crack an MD5 hash in minutes utilizing GPU acceleration and a couple basic techniques. Anyways...

Configuration snafu exposes passwords for two million marijuana growers

Passwords for GrowDiaries users were stored using the weak MD5 hashing function, putting customer accounts at risk of attacks.

www.zdnet.com

So you're essentially Gilfoyle from Silicon Valley?

 

[BurnzYzBudZz]

“Silicoke valley”

 

[redshift75]

Might still check have I been pwnd to make sure bro - sounds like a lot of that was cached user data

definitely!