Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Blooming Password – A banned password check using a bloom filter. Parent comment
It's not good to send clear text user password to yet another system
-> send it hashed
But full hash might still be vulnerable to the rainbow table attack
-> let's use only a part of the hash, AND, reject full hashes.
In summary, I believe, they tried to avoid creating more ways in which user passwords could be leaked.
There are no comments on this comment yet.
It's not good to send clear text user password to yet another system
-> send it hashed
But full hash might still be vulnerable to the rainbow table attack
-> let's use only a part of the hash, AND, reject full hashes.
In summary, I believe, they tried to avoid creating more ways in which user passwords could be leaked.