News for hackers. Stuff that matters.

A comment on Cathay Pacific flags data breach affecting 9.4M passengers. Parent comment

Re:Cathay Pacific flags data breach affecting 9.4M passengers by acct1771 on Thursday October 25, 2018 @02:35AM (#18298944)
Wouldn't a workaround for this be storing the (smaller) hash of a better passphrase, and using that to authenticate once arrive at the "vital bits"?

Then again...someone complacent enough to get that far behind in infrastructure probably doesn't have any chance of that being thought of/appoved.

[ Parent | on HN ]
Re:Cathay Pacific flags data breach affecting 9.4M passengers by rdtsc on Thursday October 25, 2018 @10:56AM (#18301356)
> Then again...someone complacent enough to get that far behind in infrastructure probably doesn't have any chance of that being thought of/appoved.

I see you've worked in the enterprise? :-)

Another reason is that nobody knows how it really works. The people who knew have long retired. The fear is updating it will likely introduce subtly new behavior and new bugs that everyone is scared of touching it.

[ Parent | on HN ]