News for hackers. Stuff that matters.

A comment on WeChat permanently closes account after user sets offensive password. Parent comment

Re:WeChat permanently closes account after user sets offensi... by 0x0 on Friday June 05, 2020 @04:08PM (#23433338)
The server would need to hold the unsalted hash then. And if those leak, everything you need to calculate the client salt is right there.
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by labawi on Friday June 05, 2020 @04:35PM (#23433661)
The server should hold the unhashed salt, as is standard. One for client, one for server.
[ Parent | on HN ]