注意：您的古代Reddit密码已被破坏

If you still use the same Reddit password you did in 2007, wow: you’ve been on Reddit a long time. Also your password is compromised.

如果您仍然使用与2007年相同的Reddit密码，那么哇：您使用Reddit已有很长时间了。 另外，您的密码也被盗用。

Sometime in June a hacker got into a few Reddit servers and accessed, among other things, an old database. From Reddit’s post about the incident:

在六月的某个时候，黑客进入了几台Reddit服务器并访问了一个旧数据库。 从Reddit关于该事件的帖子中 ：

What was accessed: A complete copy of an old database backup containing very early Reddit user data—from the site’s launch in 2005 through May 2007. In Reddit’s first years it had many fewer features, so the most significant data contained in this backup are account credentials (username + salted hashed passwords), email addresses, and all content (mostly public, but also private messages) from way back then.

所访问的内容：包含非常早的Reddit用户数据的旧数据库备份的完整副本-从站点于2005年启动到2007年5月。在Reddit成立的头几年，它的功能要少得多，因此此备份中包含的最重要的数据是帐户凭据(用户名+加盐的哈希密码)，电子邮件地址和所有内容(主要是公开消息，也包括私有消息)。

Reddit is sending messages to affected users, encouraging them to change their password. If you re-use your ancient Reddit password on other sites you should change it on those sites as well. Also you should use a password manager, because re-using an eleven year old password on multiple sites is just plain unacceptable.

Reddit正在向受影响的用户发送消息，鼓​​励他们更改密码。 如果您在其他站点上重复使用了古老的Reddit密码，则也应该在这些站点上进行更改。 另外， 您应该使用密码管理器 ，因为在多个站点上重复使用十一岁的密码是完全不可接受的。

It’s worth talking a little bit about the specifics of how this happened. The SMS-based two factor authentication of a couple Reddit employees was compromised, giving hackers access to the files in questions. This is yet another example of why you shouldn’t use SMS for two factor authentication, so consider switching out any SMS systems that offer an alternative ASAP. It’s annoying, sure, but worthwhile if you want to keep your accounts secure.

值得讨论一下这是如何发生的细节。 一对Reddit员工的基于SMS的两因素身份验证遭到破坏，使黑客能够访问有问题的文件。 这是为什么您不应该使用SMS进行两因素身份验证的另一个示例，因此请考虑关闭所有提供替代ASAP的SMS系统。 当然，这很烦人，但是如果您想确保自己的帐户安全，那是值得的。

Photo credit: Eva Blue

图片来源： Eva Blue

翻译自: https://www.howtogeek.com/fyi/heads-up-your-ancient-reddit-password-is-compromised/