Exactly, most commonly with these things is that the db was dumped which does no...

mparlane on June 6, 2012 | parent | context | favorite | on: Storing Passwords Securely

Exactly, most commonly with these things is that the db was dumped which does not imply that the source code was accessed. If the source code was accessed they normally don't need a db dump. (unless it was read-only)

The first section of the article IMHO was not needed in regards to a simple hash. Forums have been hashing their passwords with salts for how long now ?

pmylund on June 6, 2012 [–]

Sure, but I try to not make any assumptions without being boring. I think the goto-link at the beginning works fairly well.