News for hackers. Stuff that matters.

A comment on WeChat permanently closes account after user sets offensive password. Parent comment

Re:WeChat permanently closes account after user sets offensi... by mc32 on Friday June 05, 2020 @09:10AM (#23428067)
Maybe they just have simple hashes (unsalted) of their disallowed passwords and flag hits to them. They compute all the password combos that trash the CCP (and whatever else) and autoban, I guess...
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by MCOfficer on Friday June 05, 2020 @09:15AM (#23428109)
I doubt people were using "Fuck", rather something like "FuckMyEx" or whatever, which has a completely different hash. Also, passwords should be hashed with salt.
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by mc32 on Friday June 05, 2020 @09:21AM (#23428170)
“Should“ but do they?
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by shakna on Friday June 05, 2020 @09:20AM (#23428153)
In which case they aren't even salting the password, which means that hashing the password isn't doing a whole heap. It isn't plaintext, but it isn't that far from it.
[ Parent | on HN ]