News for hackers. Stuff that matters.

A comment on Auditor's response to "Our security auditor is an idiot" (Update 3). Parent comment

Re:Auditor's response to "Our security auditor is an idiot" ... by zizee on Monday August 08, 2011 @02:11AM (#2859012)
But if you have hashed the password correctly (i.e. a one way hash) you shouldn't know what the previous passwords are. This means that you would only be able to test if the password was the same, not similar.
[ Parent | on HN ]

There are no comments on this comment yet.