News for hackers. Stuff that matters.

A comment on Let them paste passwords. Parent comment

Re:Let them paste passwords by Buge on Thursday May 18, 2017 @11:46AM (#14368211)
That reduces password entropy and makes the hashes easier to crack.
[ Parent | on HN ]
Re:Let them paste passwords by stanmancan on Thursday May 18, 2017 @02:04PM (#14369551)
I didn't say it's a good idea, it's awful, just pointing it out though.
[ Parent | on HN ]
Re:Let them paste passwords by cm2187 on Friday May 19, 2017 @03:21AM (#14373581)
Well, does it? Even if you crack it you don't have the correct casing. So you don't have the original password. Of course doesn't help if every other website converts to lower case too.

But if you use bcrypt you can partially compensate by using a higher work factor.

[ Parent | on HN ]
Re:Let them paste passwords by OJFord on Friday May 19, 2017 @12:45PM (#14377335)
> Well, does it? Even if you crack it you don't have the correct casing.

The 'correct casing' is any member of the set of all permutations of cases. So you both do, don't, and do not care.

[ Parent | on HN ]