Search results for "passwords"
Toumal is a bit vague in the description, but it looks to me like he's saying: the passwords used to be stored as MD5 hashes, and the MD5 hashes could be retrieved by some site vulnerability, which means a dictionary attack could quickly crack weak passwords. Also, the MD5 hashes were unsalted, so a rainbow table attack could quickly crack many weak passwords. And this vulnerability existed for over a year.
Basically, change your SoFurry password, and if you used the same password anywhere else, you might want to change those too.
Furcadia players logged-in early this morning were surprised to find a list of usernames, emails and passwords arriving through the online news channel.