News for hackers. Stuff that matters.

A comment on Robinhood Stored Passwords in Plaintext. Parent comment

Re:Robinhood Stored Passwords in Plaintext by gdhbcc on Wednesday July 24, 2019 @06:07PM (#20520417)
But you have. It means even if you refuse your passwords elsewhere, only the website that was compromised is compromised.
[ Parent | on HN ]
Re:Robinhood Stored Passwords in Plaintext by allset_ on Wednesday July 24, 2019 @06:33PM (#20520682)
You can (and should) store the salt server-side. Moving the hashing to the client does not solve anything.
[ Parent | on HN ]
Re:Robinhood Stored Passwords in Plaintext by rocqua on Wednesday July 24, 2019 @06:27PM (#20520626)
Really, that should be a salted hadh to really defend against password reuse.
[ Parent | on HN ]