Linkedin has decided to enhance its security, in order to ensure that it won’t be affected by any hacking in the future.
After a big week and a Russian hacker publishing the passwords of 6.5 million users, Linkedin felt threatened more than ever. Since it is a big website, they couldn’t leave it without action and that’s why they decided to protect their users for future attacks.
Vicente Silveira, director at Linkedin, wrote on a Linkedin blog post:
We have built a world-class security team here at LinkedIn including experts such as Ganesh Krishnan, formerly vice president and chief information security officer at Yahoo!, who joined us in 2010. This team reports directly to LinkedIn’s senior vice president of operations, David Henke.
Under this team’s leadership, one of our major initiatives was the transition from a password database system that hashed passwords, i.e. provided one layer of encoding, to a system that both hashed and salted the passwords, i.e. provided an extra layer of protection that is a widely recognized best practice within the industry. That transition was completed prior to news of the password theft breaking on Wednesday. We continue to execute on our security roadmap, and we’ll be releasing additional enhancements to better protect our members.
Linkedin was already planning, before the attack, to protect the users with better security measures, by creating a system with an extra layer of encoding protetion.
If you are worrying about your Linkedin account, Vicente Silveira notes:
If your password has not been disabled, based on our investigation, we do not believe your account is at risk.
However, it is good practice to change your passwords on any website you log into every few months. For that reason, we have provided information to all of our members via the LinkedIn Blog, as well as a banner on our homepage instructing members on how to change their passwords.
Have you changed your password then?
Image Source: biztech2.in.com