On: 6.5 Million LinkedIn Password Hashes Leaked

[jameswyse]

Does anyone know what encryption scheme LinkedIn uses?

[lhnz → jameswyse]

You don't mean encryption. Passwords should be hashed.

[kristofferR → jameswyse]

Hashing scheme, not encryption scheme.

Anyway, they use Unsalted SHA-1, a really weak option.

[jameswyse → jameswyse]

Indeed yeah, I meant hashing.

I only build tiny websites compared to linkedin and even I take the time to use a proper hashing scheme with a salt. Shame on you, LinkedIn.