Re:Robinhood Stored Passwords in Plaintext
by bastawhiz on Thursday July 25, 2019 @12:43AM
(#20522604)
This comment is full of many inaccuracies. Leaked hashed passwords still pose a risk to users on their other accounts that may use the same password. Hashing passwords prevents internal abuse and makes your site a much less juicy target (in addition to making leaks less disastrous). It also makes timing attacks far less feasible by enabling reasonable constant time comparison of the hashed password.
[ Parent
| on HN ]