News for hackers. Stuff that matters.
Re:We didn't encrypt your password, we hashed it by i-am-curious on Friday September 04, 2020 @05:53PM (#24379255)
Won't you add a seed before hashing. With a 8 byte seed that's 16 effective characters, probably impossible to crack.
Re:We didn't encrypt your password, we hashed it by __s on Friday September 04, 2020 @05:58PM (#24379295)
By seed you mean salt. Salts are stored in plaintext, so they don't increase the entropy of the password. Instead they make it so that each password hashes uniquely so that everyone with the same password gets different hashes. They also mitigate rainbow tables by effectively requiring the attacker to create a rainbow table per target
Re:We didn't encrypt your password, we hashed it by i-am-curious on Saturday September 05, 2020 @04:11AM (#24382123)
Yes I meant salt! AFAIK such a fast cracking of hashes is mostly via rainbow tables, salts defeat those easily.
Re:We didn't encrypt your password, we hashed it by SloopJon on Friday September 04, 2020 @05:58PM (#24379297)
I'm not sure what you mean by a seed. If you mean a salt, that's no more secret than the hash. It has the effect of requiring you to crack each hash separately, but doesn't make it any harder to crack an individual hash.
Re:We didn't encrypt your password, we hashed it by kohtatsu on Friday September 04, 2020 @05:56PM (#24379283)
You add a salt, which is stored plaintext alongside the password.