News for hackers. Stuff that matters.

A comment on Why even let users set their own passwords?. Parent comment

Re:Why even let users set their own passwords? by upofadown on Saturday July 22, 2023 @11:18AM (#36826958)
That assumes the situation where the password hashes are stored in a way that is less secure than the actual data that the attacker ultimately wants access to. That must not be a very common situation.

The passwords will not be of any use on any other system. This would eliminate password reuse.

[ Parent | on HN ]
Re:Why even let users set their own passwords? by __ryan__ on Saturday July 22, 2023 @11:30AM (#36827055)
Accessing a users data is not the only reason for hacking their account. Performing actions on behalf of a user is just as much of a threat.
[ Parent | on HN ]