News for hackers. Stuff that matters.

A comment on The man who wrote the book on password management regrets the error. Parent comment

Re:The man who wrote the book on password management regrets... by ykler on Wednesday August 09, 2017 @10:23AM (#14969156)
This is wrong assuming, as is recommended practice, you use a hashing function like bcrypt or scrypt that is designed to be resistant against massive ASIC speedups, right?
[ Parent | on HN ]
Re:The man who wrote the book on password management regrets... by Bartweiss on Wednesday August 09, 2017 @11:01AM (#14969694)
I wouldn't call it wrong, but I agree that it's for fast hashes without salts. Since sites still use that (and we can't check what they're using pre-leak) it's still relevant, though.
[ Parent | on HN ]