Re:Auditor's response to "Our security auditor is an idiot" ...
by planckscnst on Saturday July 30, 2011 @08:17AM
(#2825595)
Instead of storing those pre-calculated hashes of similar strings, generate hashes on many variations of the new password and see if any match the old hash.
[ Parent
| on HN ]
There are no comments on this comment yet.