News for hackers. Stuff that matters.

A comment on Passwords, Backups and a false sense of security. Parent comment

Re:Passwords, Backups and a false sense of security by rane on Saturday August 04, 2012 @03:11PM (#4339336)
Can you give a practical example how this can become a problem if I use rand() to generate a password to be used on a website?
[ Parent | on HN ]
Re:Passwords, Backups and a false sense of security by barrkel on Saturday August 04, 2012 @06:34PM (#4339904)
Many PRNGs only have 32 bits of state. If someone knows your settings (alphabet chosen and length) the max number of passwords to check is 4 billion.
[ Parent | on HN ]