News for hackers. Stuff that matters.
Re:How To Safely Store A Password by StavrosK on Wednesday December 15, 2010 @05:54AM (#2007686)
> As it stands today, anyone using one of those is instantly compromised the moment the hash file is accessed.

How? If hashing one password takes one second, and you have a dump of a thousand users, it will take you a million seconds to try just 1,000 common passwords on that list.

Are you thinking of unsalted hashes, perhaps?

Re:How To Safely Store A Password by Cushman on Wednesday December 15, 2010 @03:50PM (#2009729)
As noted in the OP, it takes far, far less than one second to hash one password using standard algorithms.
Re:How To Safely Store A Password by StavrosK on Wednesday December 15, 2010 @04:51PM (#2009967)
It seemed to me like you were talking about bcrypt, weren't you?
Re:How To Safely Store A Password by Cushman on Thursday December 16, 2010 @01:23PM (#2013030)
Well, the argument was that user-imperceptible hash times should be sufficient for all passwords. I was trying to make the case that even the class of extremely weak passwords can be protected with perceptible hash times.

So really I think you were demonstrating my point :)