News for hackers. Stuff that matters.

A comment on The man who wrote the book on password management regrets the error. Parent comment

Re:The man who wrote the book on password management regrets... by jandrese on Wednesday August 09, 2017 @11:58AM (#14970552)
Or the website hashes the password, and then stores a plaintext (or weakly encrypted) copy in the database as well so they can make sure you don't use a "similar" password on the next change. And in fact keep like 30 passwords in the database so hackers can get a good sense of how you construct your passwords. All for better security of course.
[ Parent | on HN ]
Re:The man who wrote the book on password management regrets... by sersi on Wednesday August 09, 2017 @02:43PM (#14972324)
Oh that'd be a treasure trove for security researchers.

I think we should work on an opensource gem or plugin for cakephp that does this and hope a website uses it. It would be very good data for research into the psychology of choosing passwords.

Just imagine all the potential findings!

[ Parent | on HN ]