News for hackers. Stuff that matters.

A comment on Twitter urges users to change passwords after computer 'glitch'. Parent comment

Re:Twitter urges users to change passwords after computer 'g... by amhokies on Friday May 04, 2018 @09:02AM (#16994233)
Wouldn't that make it easier for someone that has access to hashed passwords in the case of a database leak? They would just have to submit the username and the hashed password (which they now have).
[ Parent | on HN ]
Re:Twitter urges users to change passwords after computer 'g... by etruong42 on Sunday May 06, 2018 @03:28PM (#17007964)
You're right, but the attacker won't get the user's original password that they probably reuse elsewhere.

If it's just your authentication system hashes that are compromised, the damage can be contained.

[ Parent | on HN ]