News for hackers. Stuff that matters.
Re:Diablo 3 bug report: "Passwords not case-sensitive." by elithrar on Friday May 25, 2012 @03:09AM (#4022326)
> I don't think anyone's nearly as concerned about case enforcement as they are about backend storage of passwords. I can assume ways of storing/verifying passwords that are case insensitive, but I'm not naive enough to assume they do.

Whilst I would hope they use a strong encryption scheme (with a variable work factor...), most of us know that even the biggest organisations in tech can fail miserably in this area.

But, I don't believe the majority of the forum posters see things the way we do. Many of them obviously correlate "case sensitivity" with "strong password", even though that's not exactly true.

Re:Diablo 3 bug report: "Passwords not case-sensitive." by e-dard on Friday May 25, 2012 @03:22AM (#4022366)
And by encryption scheme, you really mean hashing scheme. Yup, it's easy to get confused.