<story><title>GCHQ – Not So Secure?</title><url>http://danfarrall.com/gchq/</url></story><parent_chain></parent_chain><comment><author>jgrahamc</author><text>This is just GCHQ&apos;s way of saying that they already know how to reverse bcrypt.&lt;p&gt;On a more serious note &lt;a href=&quot;http://www.gchq-careers.co.uk&quot; rel=&quot;nofollow&quot;&gt;http://www.gchq-careers.co.uk&lt;/a&gt; does not appear to be run by GCHQ. The Terms page says that it&apos;s run by TMP Worldwide (&lt;a href=&quot;http://www.gchq-careers.co.uk/terms-and-conditions/&quot; rel=&quot;nofollow&quot;&gt;http://www.gchq-careers.co.uk/terms-and-conditions/&lt;/a&gt;).</text></comment>
<story><title>GCHQ – Not So Secure?</title><url>http://danfarrall.com/gchq/</url></story><parent_chain></parent_chain><comment><author>jiggy2011</author><text>To be fair, I doubt that the GCHQ website is developed by the same people who are doing cyber intelligence work or whatever it is they do.&lt;p&gt;More likely it was just developed by whichever company was picked off a list of government contractors. I&apos;m sure that whatever internal systems they have are completely separate from the website.&lt;p&gt;GCHQ probably consider arguing with a contractor about the password hashing on the jobs section of their website as a waste of their time.</text></comment>