Re:To Keep Passwords Safe from Hackers, Just Break Them into...
by cookingrobot on Tuesday October 09, 2012 @02:37PM
(#4633235)
It seems really unlikely that any of these leaks has been due to a security flaw in the operating system. I'd think that even in this scheme if an admin account or authentication process is compromised, then the attacker's going to have access to both password stores.
[ Parent
| on HN ]
Re:To Keep Passwords Safe from Hackers, Just Break Them into...
by dekz on Tuesday October 09, 2012 @05:27PM
(#4634054)
Well, no, because it's a write only model. If the admin account becomes compromised there is no way to read the passwords back. That is of course unless you have root access to both machines, in which case the password can be salted + hashed and then split and stored.