← Back to context

Comment by MrBra

14 years ago

>Even though this information was accessed, the passwords stored by Scribd are encrypted (in technical terms, they are salted and hashed). Most of our users were therefore unaffected by this; however, our analysis shows that a small percentage may have had their passwords compromised.

Could someone explain me what this means: "our analysis shows that a small percentage my have had their password compromised" ?

Do you think this refers to the fact that they might have conducted a statistical analysis which evidenced the fact that _potentially_ a relevant percentage of password could have completely decrypted?

I mean, is this warning just the outcome of a statistical analysis on the possibility that password could have been decrypted?

Or they are still just referring to the fact alone that a small percentage of hashed & salted password have leaked?

I have gone through the "check your email" form. And this was the result:

>We're very sorry to tell you that your Scribd password was among those compromised. If you have used this password on any other services, you should change it immediately.

Compromised here refers to leaked, or potentially decrypted based on some sort of statistical analysis they made?

Makes me think they implemented a password logger on login. Not just a database leak but a complete compromise.