News for hackers. Stuff that matters.

A comment on One way to fix your rubbish password database.

Re:One way to fix your rubbish password database by nateabele on Friday June 08, 2012 @11:16AM (#4084582)
Okay, I must really be missing something here.

If your original database contains a bunch of unsalted SHA1 (or worse, MD5) hashes, what good does securing the hashes themselves do if the means to generate the corresponding plaintext has already been released into the wild?

Someone please tell me I'm missing something obvious.

[ Parent | on HN ]
Re:One way to fix your rubbish password database by joshrice on Friday June 08, 2012 @11:47AM (#4084727)
It's how to fix your rubbish password storage, not LinkedIn's or the others who've been compromised. That's the difference.
[ Parent | on HN ]