News for hackers. Stuff that matters.
Re:Ask HN: Why Limit Password Length? by db48x on Thursday February 25, 2021 @08:01PM (#26270393)
Nice. There are lots of ways to speed that up, though. Use tries, or hash both your user's passwords and the list. (So that they're all the same length, and you never care about substring matches.)
Re:Ask HN: Why Limit Password Length? by eeegnu on Thursday February 25, 2021 @08:59PM (#26270693)
I've had sites tell me when resetting a password that my new password is too similar to one of my old passwords (not even the previous one.) Far too many sites do something similar to substring searches.
Re:Ask HN: Why Limit Password Length? by db48x on Thursday February 25, 2021 @09:58PM (#26270960)
That is an entirely different can of worms :)