News for hackers. Stuff that matters.

A comment on Stop restricting my password - Help these sites get better security.. Parent comment

Re:Stop restricting my password - Help these sites get bette... by shrughes on Friday January 22, 2010 @04:24AM (#1069382)
They should be storing a salted hash, not the actual passwords, so the content of the password shouldn't matter.

No, they should be using bcrypt. You didn't think you'd get away with this by posting after tptacek's bedtime, did you?

[ Parent | on HN ]
Re:Stop restricting my password - Help these sites get bette... by dinkumator on Friday January 22, 2010 @02:33PM (#1070466)
md5, sha, blowfish, bcrypt... name your pick. i didn't mention a specific algorithm. either way, you're still not saving the password to a database.
[ Parent | on HN ]