Re:Yahoo discloses hack of 1B accounts
by DougBTX on Wednesday December 14, 2016 @07:05PM
(#13181004)
Interestingly even if the password has infinite length, an MD5 hash has a fixed finite length. You can think of it as a glorified modulus operator, beyond some point the longer passwords will have hashes that match shorter ones.
[ Parent
| on HN ]
True -- but assuming these passwords aren't stored the same (very, very wrong) way on another site, and they're no longer useful on Yahoo, what's important is finding the real password, not just a password that happens to match the given hash.