<story><title>Gab Has Been Breached</title><url>https://www.troyhunt.com/gab-has-been-breached/</url></story><parent_chain><item><author>dt3ft</author><text>If you just want to know how the breach[1] happened: it was SQL injection, where string interpolation was used to construct a query, rather than use parametrized queries.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;arstechnica.com&amp;#x2F;gadgets&amp;#x2F;2021&amp;#x2F;03&amp;#x2F;rookie-coding-mistake-prior-to-gab-hack-came-from-sites-cto&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;arstechnica.com&amp;#x2F;gadgets&amp;#x2F;2021&amp;#x2F;03&amp;#x2F;rookie-coding-mistak...&lt;/a&gt;</text></item></parent_chain><comment><author>Intermernet</author><text>Little Jimmy Tables strikes again.</text></comment>
<story><title>Gab Has Been Breached</title><url>https://www.troyhunt.com/gab-has-been-breached/</url></story><parent_chain><item><author>dt3ft</author><text>If you just want to know how the breach[1] happened: it was SQL injection, where string interpolation was used to construct a query, rather than use parametrized queries.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;arstechnica.com&amp;#x2F;gadgets&amp;#x2F;2021&amp;#x2F;03&amp;#x2F;rookie-coding-mistake-prior-to-gab-hack-came-from-sites-cto&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;arstechnica.com&amp;#x2F;gadgets&amp;#x2F;2021&amp;#x2F;03&amp;#x2F;rookie-coding-mistak...&lt;/a&gt;</text></item></parent_chain><comment><author>camjohnson26</author><text>I thought bcrypt had built in salts, how was he able to reverse those hashes for simple passwords? Any better algorithm to use or recommendation on salting?</text></comment>