@polemic @adrianthomas @troyhunt @SlackHQ Original is here - https://web.archive.org/web/20150730154018/http://slackhq.com/post/114696167740/march-2015-security-incident-and-launch-of-2fa They were using bcrypt even back then though, so it shouldn't be that (if it is, that's gonna be some big news)