News for hackers. Stuff that matters.

A comment on Stop forcing arbitrary password rules. Parent comment

Re:Stop forcing arbitrary password rules by sfilipov on Saturday October 24, 2015 @12:47PM (#10444128)
If they can crack the database, what's preventing them from getting the key used to encrypt the database?
[ Parent | on HN ]
Re:Stop forcing arbitrary password rules by 0x49 on Saturday October 24, 2015 @01:21PM (#10444223)
When i say encryption, i mean 1-way encryption like bcrypt. So they could get the hashes, but would still have to somehow brute-force it.
[ Parent | on HN ]