Say what?! Didn’t they say they were able to find the root pwd hash in less than 30min?

It looks like downplaying the potential of ret attacks was at best overly optimistic.