Re:How Dropbox securely stores your passwords
by csharp on Wednesday September 21, 2016 @02:43PM
(#12551045)
It would still make a significant difference since someone could still compromise your Dropbox account... Having a password manager doesn't all of the sudden make all of your passwords secure on all of your different accounts.
[ Parent
| on HN ]
Re:How Dropbox securely stores your passwords
by shizcakes on Wednesday September 21, 2016 @02:47PM
(#12551073)
The point is that the passwords on all of the accounts are different. Thus, the compromise of one service does not impact the accounts on any others.
Re:How Dropbox securely stores your passwords
by zymhan on Wednesday September 21, 2016 @03:10PM
(#12551270)
That doesn't mean I don't care if my Dropbox account got breached because the password was in plaintext.
Re:How Dropbox securely stores your passwords
by singlow on Wednesday September 21, 2016 @03:57PM
(#12551672)
I suppose there are cases where someone got the dropbox password hashes and didn't own dropbox enough to have access to your dropbox account without reversing your hash. However, in most cases where plaintext passwords are exposed, the attacker will own your account at the service that was attacked because they are already inside that system.
If the DropBox passwords are leaked I am going to change my DropBox password whether it was hashed properly or not. The difference is that I won't have to change my password on dozens of other sites.