Re:Google Nexus 5x and 6P
by branchan on Tuesday September 29, 2015 @11:03PM
(#10301467)
Bottomline is that in this day and age, if someone wants to hack a server and steal passwords, they can so it probably doesn't matter.
[ Parent
| on HN ]
Not exactly, that's what bcrypt and scrypt are for. Attackers would have to modify the running code to divert raw passwords elsewhere, which would be a lot more noticeable.
No, that's not the bottom line. One fingerprint opens everything and cannot be changed. You can use a different password for each site so when some craptastic one gets compromised, you're not screwed for life.