News for hackers. Stuff that matters.

A comment on WeChat permanently closes account after user sets offensive password. Parent comment

Re:WeChat permanently closes account after user sets offensi... by nucleardog on Friday June 05, 2020 @11:22PM (#23436544)
No reason the server can’t provide a nonce for the login to salt the hash.
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by Sir_Substance on Saturday June 06, 2020 @07:10PM (#23443164)
Now the server has to store the password in plain text so it can rehash with the new nonce every time.
[ Parent | on HN ]
Re:WeChat permanently closes account after user sets offensi... by withinboredom on Saturday June 06, 2020 @06:22AM (#23438142)
And how would the server know the desalted hash?
[ Parent | on HN ]