News for hackers. Stuff that matters.

A comment on We didn't encrypt your password, we hashed it. Parent comment

Re:We didn't encrypt your password, we hashed it by dec0dedab0de on Friday September 04, 2020 @05:48PM (#24379219)
If that gets leaked the attacker could brute force that, and match the results to your entire list of hashes. If they're salted, they would still have to brute force each password individually.
[ Parent | on HN ]
Re:We didn't encrypt your password, we hashed it by dvt on Friday September 04, 2020 @05:51PM (#24379244)
Totally agree with this, hence the caveat that the code doesn't get leaked/compromised :)
[ Parent | on HN ]