Re:Twitch is hacked, and its source code leaked
by mindwok on Wednesday October 06, 2021 @03:37PM
(#28777336)
If they are the same everywhere, you can precompute a huge database of hashes (called a rainbow table) and simply lookup the hash in the table when breaches occur to find the password. By salting, every provider who stores credentials has different hashes for the same inputs which makes the approach far less attractive at a large scale.
[ Parent
| on HN ]
Re:Twitch is hacked, and its source code leaked
by thaumasiotes on Wednesday October 06, 2021 @06:13PM
(#28779152)
> If they are the same everywhere, you can precompute a huge database of hashes (called a rainbow table) and simply lookup the hash in the table when breaches occur to find the password.
You can do this anyway. But the space requirements of a rainbow table are so large that including an account's username in the password would make a rainbow table completely unfeasible.