News for hackers. Stuff that matters.

A comment on Passwords for 32M Twitter accounts may have been hacked and leaked. Parent comment

Re:Passwords for 32M Twitter accounts may have been hacked a... by imdsm on Thursday June 09, 2016 @03:19AM (#11868024)
You'd still need the salt though, right?
[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by valleyer on Thursday June 09, 2016 @03:27AM (#11868046)
The salt is typically stored with the hashed value. Its purpose is simply to prevent you from being able to use a single dictionary attack on all users.
[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by andruby on Thursday June 09, 2016 @03:54AM (#11868128)
The salt is usually stored with the hash. It prevents using pre-calculated rainbow tables. Without a salt you can check a password guess against all passwords. With a salt you can only test the guess against a single password.
[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by 15155 on Thursday June 09, 2016 @03:24AM (#11868039)
Bcrypt salts are ordinarily colocated with the hashes and the number of rounds used to compute them.
[ Parent | on HN ]