News for hackers. Stuff that matters.
Re:To Keep Passwords Safe from Hackers, Just Break Them into... by circlingthesun on Tuesday October 09, 2012 @10:41AM (#4631741)
This sounds a lot like the last level of capture the flag 2.
Re:To Keep Passwords Safe from Hackers, Just Break Them into... by mguillemot on Tuesday October 09, 2012 @11:03AM (#4631873)
The security flaw highlighted in Stripe CTF2 was that you could check the validity of each independant chunk independantly of the others, which meant reducing the search space for bruteforce attacks.

From what I understand, the technique proposed here would mean you cannot say anything about the validity of just one chunk: each server apply some operation on the password it receives and the chunk it stores, and all these operations have to be combined to say if the password was valid or not. If it's not, you cannot know which chunk was invalid.

Re:To Keep Passwords Safe from Hackers, Just Break Them into... by mattlong on Tuesday October 09, 2012 @11:05AM (#4631883)
Re:To Keep Passwords Safe from Hackers, Just Break Them into... by lucian1900 on Tuesday October 09, 2012 @10:59AM (#4631847)
And is also likely to suffer from vulnerabilities because of its complexity.