News for hackers. Stuff that matters.

A comment on AdultFriendFinder was hacked. Parent comment

Re:AdultFriendFinder was hacked by russdill on Sunday November 13, 2016 @06:06PM (#12946279)
You seem to be describing a non-standard way of salting hashes, and in the case of modifying the case, an extremely poor way of doing it. Please don't do that.
[ Parent | on HN ]
Re:AdultFriendFinder was hacked by hueving on Sunday November 13, 2016 @08:18PM (#12946821)
Not changing the salting. Changing the hashing algorithm.
[ Parent | on HN ]
Re:AdultFriendFinder was hacked by femto113 on Tuesday November 15, 2016 @07:17AM (#12957392)
This is intended as a thought experiment, not a concrete design for how to properly store passwords. In fact CRC24 doesn't really burn as much information as I assumed, e.g. on the top 100,000 passwords it only generates about 300 collisions (so over 99% still generate unique hashes). If one was really going to go in this direction a specialized hash that is deliberately collision prone across password-like strings is probably needed.
[ Parent | on HN ]