Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years

Re:Facebook Stored Hundreds of Millions of User Passwords in... by g45y45 on Thursday March 21, 2019 @12:38PM (#19454326)

You don't need to store 3 hashes, infact, you would need many hashes for all possible cases. It is easier to drop all cases pre hashing, and only store a lower case hashed value.

[ Parent | on HN ]

Re:Facebook Stored Hundreds of Millions of User Passwords in... by dymk on Thursday March 21, 2019 @12:45PM (#19454407)

Hashing the the lowercase version of the password string is not the same as what they’re doing. What you’re suggesting greatly reduces the security of the password, what they’re doing only divides the search space by 3 (which is nothing).

[ Parent | on HN ]