News for hackers. Stuff that matters.

A comment on Gmail password first character is case insensitive on mobile device. Parent comment

Re:Gmail password first character is case insensitive on mob... by weird-eye-issue on Saturday October 09, 2021 @07:20AM (#28808870)
is_password_valid = hash_password(normalize_password_case(password) if version == 1 else password) == hashed_password
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by pixl97 on Saturday October 09, 2021 @07:25AM (#28808895)
Are we doing this client side or server side?

If you're actually using a 'strong enough' hash to prevent easy cracking if your hashed password database is leaked then you're doubling the server load which can be quite substantial in some cases.

[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by weird-eye-issue on Saturday October 09, 2021 @07:43AM (#28809019)
It's only being hashed once...

And obviously this is server side

[ Parent | on HN ]