Re:LastPass breach: The significance of these password itera...
by stubish on Wednesday December 28, 2022 @07:25PM
(#34167912)
Can attackers can easily tell the 1 and 500 iteration databases and focus their resources in breaching those ones?
[ Parent
| on HN ]
Re:LastPass breach: The significance of these password itera...
by palant on Thursday December 29, 2022 @03:15AM
(#34170603)
Disclaimer: I’m the author of this article.
Yes. The number of iterations is presumably stored in the same customers database that they stole. Even if not: the number of iterations can be queried via a public API, anyone can do it if they know the email address.