News for hackers. Stuff that matters.

A comment on Zappos.com customer database compromised. Parent comment

Re:Zappos.com customer database compromised by manmal on Monday January 16, 2012 @04:16AM (#3469991)
What do you mean by "the salt is secure"? Hidden in code files vs. stored next to the hashed password?
[ Parent | on HN ]
Re:Zappos.com customer database compromised by troll24601 on Monday January 16, 2012 @11:52AM (#3471360)
I apologize if my question was unclear; that's almost certainly because of a lack of expertise on my side.

On one end of the spectrum, I envision the same salt used for every user, allowing for the easy and effective creation of rainbow tables. On the other end, I envision unique salts with many bits of entropy for each user, making rainbow tables technologically infeasible.

[ Parent | on HN ]