News for hackers. Stuff that matters.
Re:Bitwarden Design Flaw by eyelidlessness on Monday January 23, 2023 @11:59PM (#34499499)
Maybe overly pedantic to expand on this, but since we’re in an ELI5 context: the attack vector is brute forcing hash collisions. Making it computationally slow for attackers is a hindrance because the relative value of a collision diminishes over time (depending on the value of their target).
Re:Bitwarden Design Flaw by rcxdude on Tuesday January 24, 2023 @08:38AM (#34503375)
It's not really hash collisions: SHA256 is still too secure for that, you're unlikely to find a value which isn't the password used to generate it. It's just brute forcing the password