Pwned websites
Apart from one 7 byte entry, all the password fields were a multiple of 8 bytes long. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced. The password cryptography was poorly done and many were quickly resolved back to plain text.
The hacker also claims that Yahoo is the next target. Who can access this data? On October Adobe reported that some user data, including credit cards and password dumps, got stolen from their servers.
Pwned websites - Since that time the Mosque has been run by a group supported by the Metropolitan Police. The mosque was in years past visited by Al Qaeda operatives, Beslan Siege members, and had convicted terrorist Abu Hamza al-Masrim as its imam in 1997.
The credit bureaus would prefer that you purchased a copy of your credit report from them the annoyingly catchy commercials for freecreditreport. So I built a data set of ten million usernames and passwords that I am releasing to the public domain. Hashing, password strengthening and encryption are different things. This breach is a bit different to most, so we ought to take the opportunity to learn the proper lessons. Is there any reason to suggest that Adobe might have done this, and why is this usually not a recommended technique? Again: anyone that shares a 8-characters block with your key can recover it. You can think of the process as fingerprinting the password, so that all that is ever stored is a pattern which matches what the password is.