News for hackers. Stuff that matters.

A comment on Twitch is hacked, and its source code leaked. Parent comment

Re:Twitch is hacked, and its source code leaked by mercurywells on Wednesday October 06, 2021 @04:54PM (#28778290)
What if you did something like hash(plaintext_pw+"twitchsalt") <browser> ---> <server> hash(browser_hash + db_salt)
[ Parent | on HN ]
Re:Twitch is hacked, and its source code leaked by growt on Wednesday October 06, 2021 @05:30PM (#28778717)
If I understand this right, the problem is "twitchsalt" has to be known so that you can generate the same hash for future logins. So it's just one iteration of hashing more for a brute force attempt (modern hashing algorithms already use multiple iterations of hashing to make brute forcing harder)
[ Parent | on HN ]
Re:Twitch is hacked, and its source code leaked by ocdtrekkie on Wednesday October 06, 2021 @05:25PM (#28778648)
Well, bear in mind, the hacker also has the exact code Twitch uses to salt it's hashes.
[ Parent | on HN ]
Re:Twitch is hacked, and its source code leaked by xorcist on Saturday October 09, 2021 @11:51AM (#28810888)
The browser_hash is now the password.
[ Parent | on HN ]