News for hackers. Stuff that matters.
Re:Twitch source code and customer data has reportedly been ... by andy_ppp on Wednesday October 06, 2021 @08:11AM (#28772152)
Shouldn’t the hash be salted and useless elsewhere?
Re:Twitch source code and customer data has reportedly been ... by tinus_hn on Wednesday October 06, 2021 @08:25AM (#28772271)
In theory, it should. In practice? Who knows.
Re:Twitch source code and customer data has reportedly been ... by par on Wednesday October 06, 2021 @11:01AM (#28773971)
In practice it'll be plaintext stored on someones hard drive.
Re:Twitch source code and customer data has reportedly been ... by netflixandkill on Wednesday October 06, 2021 @12:54PM (#28775370)
Outside of the same authentication domain with bad auth token practices (windows) the hash almost always is useless elsewhere. Salting increases the complexity and thus size of hash tables or hash comparison (rainbow tables), but if your manage to break or brute force the entries, salted or not, the secret often is reused by many users.
Re:Twitch source code and customer data has reportedly been ... by zalequin on Wednesday October 06, 2021 @08:30AM (#28772320)
Provided that its hashed with salt / diff methods, sure - but how can you be sure?
Re:Twitch source code and customer data has reportedly been ... by lordlic on Wednesday October 06, 2021 @09:18AM (#28772789)
That's not what salting does, and different hashing methods are irrelevant. The danger of having your hash leaked is that it can be cracked and the plaintext password recovered. The hash itself is entirely useless for logging into other services.
Re:Twitch source code and customer data has reportedly been ... by zalequin on Wednesday October 06, 2021 @01:00PM (#28775460)
t. infoseclet
Re:Twitch source code and customer data has reportedly been ... by csark11 on Wednesday October 06, 2021 @08:28AM (#28772305)
It can still be cracked
Re:Twitch source code and customer data has reportedly been ... by andy_ppp on Wednesday October 06, 2021 @10:09AM (#28773388)
This is the SHA 256 of a phrase... go for it!

7BB7DB877943832837046863EF45C252D3A08C92A273F7B665210A6E12701095

Re:Twitch source code and customer data has reportedly been ... by prophesi on Wednesday October 06, 2021 @10:36AM (#28773669)
A phrase almost certainly has a lot more entropy than the layman's reused password from other leaks.
Re:Twitch source code and customer data has reportedly been ... by vsareto on Wednesday October 06, 2021 @10:56AM (#28773908)
If this is a phrase to unlock a bitcoin account with 1000 bitcoins in it, then you can easily convince people to try and brute force it.

Do you have Amouranth's or xQcOW's salted hash from this leak? Might be worth trying to brute force it.

You try on those kinds of accounts because they might have re-used it or the password might be patterned or not completely random, which gives you a chance that the credential might give you access elsewhere.

Re:Twitch source code and customer data has reportedly been ... by DrJaws on Wednesday October 06, 2021 @09:00AM (#28772589)
good luck hacking my password horse correct battery staple