News for hackers. Stuff that matters.
Re:League of Legends database compromised, passwords hashed ... by _b8r0 on Saturday June 09, 2012 @07:01AM (#4087825)
A few years back I started a project to create rainbow tables for Oracle hashes with friends. The old Oracle hashing algorithm was pretty weak, but used the username as a salt. Within a few weeks we had rainbow tables for lots of default oracle accounts.

Moral of the story is to use a unique salt per account, but don't roll your own crypto in the process.

There are no comments on this comment yet.