Passwords for 32M Twitter accounts may have been hacked and leaked

Re:Passwords for 32M Twitter accounts may have been hacked a... by Olscore on Thursday June 09, 2016 @04:01AM (#11868148)

Right, but you would still bypass the rate limiting of the server whether that be login attempts, http requests per second, firewall rules, latency or whatever when checking.

[ Parent | on HN ]

Re:Passwords for 32M Twitter accounts may have been hacked a... by dogma1138 on Thursday June 09, 2016 @05:36AM (#11868356)

That's another rate limiting that has nothing to do with the hash strength.

Good password hashing functions have internal rate limits that reduce the likelihood of anyone being able to break the hashes easily because they will be expensive even when fully implemented in hardware.

For how long are they resilient it's another question but bcrypt is pretty good, it's quite slow, and is expensive to implement in ASIC/FPGA.

[ Parent | on HN ]

Re:Passwords for 32M Twitter accounts may have been hacked a... by sintaxi on Friday June 10, 2016 @08:32PM (#11881294)

This is what I was thinking about. Thanks.

[ Parent | on HN ]