Re:Can you trust Paul Graham with your password?
by Manfred on Wednesday May 06, 2009 @02:38AM
(#595336)
Hashing passwords doesn't add any real security when the server is compromised, the attacker can just take the entire database.
For a news site accounts are used for identification and not for protection of goods or information so it doesn't matter that much anyway. If the admin of the site finds out that the system is compromised, it's pretty easy to just reset all passwords.
For a news site accounts are used for identification and not for protection of goods or information so it doesn't matter that much anyway. If the admin of the site finds out that the system is compromised, it's pretty easy to just reset all passwords.