Dropbox prompts password resets

Re:Dropbox prompts password resets by bdcravens on Friday August 26, 2016 @12:24AM (#12364224)

You don't need original password, hash the hash.

    if date < '2016-01-01'
        return newly_hashed == new_hash(old_hash($password))

[ Parent | on HN ]

Re:Dropbox prompts password resets by sirius87 on Friday August 26, 2016 @12:46AM (#12364283)

And hash twice again during login/password lookup then? Can be done, but tedious.

[ Parent | on HN ]

Re:Dropbox prompts password resets by mrswag on Friday August 26, 2016 @05:48AM (#12365217)

Yes, but it happens only the first time, if you update the stored hash with newHash(plaintext_password)

[ Parent | on HN ]

Re:Dropbox prompts password resets by bdcravens on Friday August 26, 2016 @02:43AM (#12364642)

Sure, not ideal, but would prevent mass password updates.

[ Parent | on HN ]