Comment on Plex got hacked.

• some_kind_of_guy@lemmy.world ⁨1⁩ ⁨month⁩ ago

  Ideally, they wouldn’t

  source
• NewNewAugustEast@lemmy.zip ⁨1⁩ ⁨month⁩ ago

  Decode like any other PII, so it is encrypted at rest and when stolen.

  source

  • vithigar@lemmy.ca ⁨1⁩ ⁨month⁩ ago

    Encryption and hashing are different things. You can’t get the original back out of a secure hash. They’re used only to confirm that whatever piece of data you have now matches the one that was provided originally, because they produce the same hash. You can’t store hashes for any data that you ever want to be able to read.

    source

    • bountygiver@lemmy.ml ⁨1⁩ ⁨month⁩ ago

      e-mail hasing is viable if you are only using your email for sign in and account recovery. Unfortunately it’s not happening because every service would also want to send you periodical emails about other stuffs.

      source
    • NewNewAugustEast@lemmy.zip ⁨1⁩ ⁨month⁩ ago

      Yeah I want thinking when I wrote that. But the idea still stands encrypt the emails.

      source
  • frongt@lemmy.zip ⁨1⁩ ⁨month⁩ ago

    So not hashed, and readable through whatever API accesses it anyway.

    source
• dogs0n@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

  I agree addy or simplelogin, etc are great.

  I started using an email forwarding service when I setup a new email a few years ago and I still have zero spam, because as soon as one service sends one too many marketing emails that I can’t turn off, I simply disable the email alias I used with them (and enable it again if needed down the line).

  This is the only way because no website, etc is gonna keep your email address safe and secure, because they don’t really care about you.

  Using aliases everywhere also makes it hard to track you based on your email (assuming services share this between each other, advertisers, etc).

  source