Catch up on stories from the past week (and beyond) at the Slashdot story archive


Forgot your password?

Submission Evernote Hit by Hackers->

plsuh writes: "Evernote is the latest victim of an attack. According to their website,

"In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.

"The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. (In technical terms, they are hashed and salted.)"

No indication as to the hashing mechanism — is it a simple, easily brute forced MD-5 or is it a harder, more secure PBKDF2, Bcrypt, or Scrypt with lots of rounds? Anyway, Evernote has reset the passwords of all of the affected users."

Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Evernote Hit by Hackers

Comments Filter:

There is no likelihood man can ever tap the power of the atom. -- Robert Millikan, Nobel Prize in Physics, 1923