News for hackers. Stuff that matters.

A comment on WeChat permanently closes account after user sets offensive password. Parent comment

Re:WeChat permanently closes account after user sets offensi... by devado on Friday June 05, 2020 @12:56PM (#23430686)
I think the idea is to hash on client _and_ the server. The client 1-way hash (~~unlike the server's 2-way~~) is the new "password" now and it's sole purpose is so that you don't get to see the raw password on the server.
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by ht85 on Friday June 05, 2020 @01:18PM (#23430986)
> server's 2-way

Are thinking of encoding / decoding? If so it isn't used for passwords.

[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by devado on Friday June 05, 2020 @01:23PM (#23431078)
indeed, scratch that. i rewrote that comment a couple of times, and that 2-way part is of course not correct. this would defeat the point of hashing passwords if they were reversible
[ Parent | on HN ]