Is there an exploit in ESET?

[Jacqui D]

Not sure what this means for end users, but is this something we should be concerned for?

xttps://twitter.com/#!/yourhacknet/status/183600292531666944

[Cudni]

from past experience and without looking at the link nothing to be concerned.

[SmackyTheFrog]

It's a dump of the account hashes from a Nepal reseller database. Only looks like a few dozen accounts. It's a 256-bit hash and probably salted so cracking them in to actual passwords is going to be extremely difficult if not mathematically impossible. Eset will need to figure out how they got access and send out notifications to those users about the compromise and that there is some risk if they use the same password as they do for other websites tied to that email address. But you only need to be concerned if your email address is listed there.