Passwords for 32M Twitter accounts may have been hacked and leaked

Re:Passwords for 32M Twitter accounts may have been hacked a... by Unklejoe on Thursday June 09, 2016 @08:39AM (#11868934)

It seems like implementing a security strength which is a function of the current practical CPU speed is a recipe which could lead to disaster in the future, mainly because of how reluctant some companies are to change existing systems once they are in place.

The concept actually makes sense, but it kind of assumes that the strength of the security will be increased at the same rate of which technology progresses, which I don’t think will always be the case. This is especially true when you consider potential “bursts” in computation speed progression.

That being said, I’m not implying that I have a better idea. Running algorithms that take 30 seconds to execute isn’t going to work for logging into your Twitter account either.

[ Parent | on HN ]

Re:Passwords for 32M Twitter accounts may have been hacked a... by tracker1 on Thursday June 09, 2016 @05:42PM (#11872617)

Depends on how you design your password system... once upgraded a password system by putting a marker with the pwd for newer encoding... this way it can be upgraded as users login.. after n% of users have rolled to the new system, or x days, you can disable the other accounts and require they reset/recover their password for use.

[ Parent | on HN ]