Disqus previously used the MD5 algorithm to hash users' emails. A group of Swedes used a dictionary attack to reveal the email addresses (and in many cases identities) of hundreds of Disqus users, many of whom had made right-wing comments(which are taboo across most of the western world). Anyway, I would like to know what hash algorithm Disqus is using now to store users' emails. On their website, they said that they stopped using MD5, but they didn't say what hash algorithm they changed to. I am researching Disqus for an assignment, so that's why I want to know this.
closed as off-topic by RoraΖ, schroeder♦, Polynomial, Steve, Lucas Kauffman May 19 '15 at 18:30
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "This question does not appear to be about Information security within the scope defined in the help center." – RoraΖ, Steve, Lucas Kauffman
The hash was created by Gravatar, not Disqus and it appears that Gravatar is still using MD5 to create user lookup IDs; meaning the intent of this implementation is to make it easy to create, store and lookup users, not hide who the user is. Also appears that Disqus still supports Gravatar; meaning MD5 is still the hash being used.