The “Cobra Effect” that is disabling paste on password fields

Re:The “Cobra Effect” that is disabling paste on password fi... by cosecantt on Sunday June 26, 2016 @09:53AM (#11980767)

I do not agree that they store a password in plain text. You cannot say for sure. What if they hash each character and store each with its position in the db?

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by hartator on Sunday June 26, 2016 @10:02AM (#11980803)

That wouldnbe still pain text actually, because it's easy to have a table for hash -> char. Chararcters being limited by their numbers.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by cosecantt on Sunday June 26, 2016 @10:41AM (#11980982)

Fine. Refer to my detailed answer below that shows longer hashing difficult to bruteforce.

[ Parent | on HN ]

Re:The “Cobra Effect” that is disabling paste on password fi... by hartator on Sunday June 26, 2016 @11:13AM (#11981104)

I don't find your other answer. But, basically if you hash one character, there is only ~ 255 possibities (a-zA-Z0-9 plus some special chars). So, a 10 characters password is only ~ 2,500 hash to compute and that's nothing. Might as well store it in plaintext, because it in fact is.

[ Parent | on HN ]