Hacker News Reader

~It's pretty shocking that the SHA1-hashed passwords weren't salted.~

Edit: I misread the article. It says the leaked hashes were salted, but the leak didn't include the salts.

Are you referring to "the bcrypt accounts include the salt whilst the SHA1 accounts don't"?

I think he's saying that the leak didn't include the salts.