News for hackers. Stuff that matters.

A comment on Diablo 3 bug report: "Passwords not case-sensitive.". Parent comment

Re:Diablo 3 bug report: "Passwords not case-sensitive." by tptacek on Friday May 25, 2012 @06:20AM (#4022852)
They're using SRP, which dictates that they're storing passwords (relatively) securely on their side. You don't have to guess; this stuff has been reversed.
[ Parent | on HN ]
Re:Diablo 3 bug report: "Passwords not case-sensitive." by uxp on Friday May 25, 2012 @10:48AM (#4023724)
Storing un-hashed passwords (encrypted or otherwise)?

I'm largely unaware of crypto outside of the general "use bcrypt" webapp cases. SRP is a fairly unknown field to me.

Edit: nevermind, you more or less confirmed this question further down this thread[1], and [2]

[1] http://news.ycombinator.com/item?id=4022996

[2] http://news.ycombinator.com/item?id=4023034

[ Parent | on HN ]