News for hackers. Stuff that matters.
Re:Password-less login by zer0tonin on Friday March 10, 2017 @04:53AM (#13837498)
>Con: If database is compromised and passwords are reused across sites, then attackers might be able to access more sites

Never heard of hashing or TLS/SRP?

Re:Password-less login by manigandham on Friday March 10, 2017 @05:06AM (#13837539)
Those alone are not enough, a compromised database storing hashed passwords behind a service that uses TLS would still allow the attackers to try common passwords and hashing algorithms to see what passwords were used.

Password simplicity and reuse (especially across lots of people) is a major problem with password security in data breaches.

Re:Password-less login by grenoire on Friday March 10, 2017 @06:48AM (#13837898)
Salting is more relevant in this case.