Disqus Security Alert: User Info Breach

Re:Disqus Security Alert: User Info Breach by akvadrako on Saturday October 07, 2017 @05:44AM (#15423071)

It's also true that even with a "password hash" your short password is not secure. It makes the attack more expensive, maybe from $10 to $10000 today, or $1000 next year. But practically that isn't something you should rely on.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by fulafel on Saturday October 07, 2017 @06:52AM (#15423261)

Now you flipped over to the other extreme :) I'll leave it to others to argue how there are parameters that make an acceptable tradeoff for proof-of-work hashes like scrypt for many applications.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by akvadrako on Saturday October 07, 2017 @09:17AM (#15423649)

I didn't flip - my point is "password hashes" and other secure hashes are similarly secure. You need a long password to trust it won't be brute-forced.

[ Parent | on HN ]