&gt; This meant that we could crack accounts created prior to this date with simple salted MD5.<p>This means that there was a decision not to force previously created accounts to update their passwords to make their accounts more secure.<p>Contrast this with the big Evernote vulnerability where all users were required to reset their passwords.