News for hackers. Stuff that matters.
Re:Robinhood Stored Passwords in Plaintext by bastawhiz on Thursday July 25, 2019 @12:43AM (#20522604)
This comment is full of many inaccuracies. Leaked hashed passwords still pose a risk to users on their other accounts that may use the same password. Hashing passwords prevents internal abuse and makes your site a much less juicy target (in addition to making leaks less disastrous). It also makes timing attacks far less feasible by enabling reasonable constant time comparison of the hashed password.
Re:Robinhood Stored Passwords in Plaintext by forty on Thursday July 25, 2019 @10:56AM (#20525905)
I agree with what you are saying but I don't see how this conflicts to what I said.