News for hackers. Stuff that matters.

A comment on Important Kickstarter Security Notice. Parent comment

Re:Important Kickstarter Security Notice by akerl_ on Saturday February 15, 2014 @04:40PM (#7245447)
You may be joking, but for the sake of other people who might read that and not know the reality of the situation:

That is not the case. Even just the length makes it pretty clear which hash is in use ( https://en.wikipedia.org/wiki/List_of_hash_functions ), and even assuming some crazy "security" scheme in use for storing them (hashing and then padding, or some such), someone with the hashes only has to figure out one password to figure out the procedure used. Given the high likelihood of there being "password" or "12345" hashed somewhere in there, that's not so hard.

[ Parent | on HN ]
Re:Important Kickstarter Security Notice by carbocation on Saturday February 15, 2014 @04:44PM (#7245476)
You are correct; any wise attacker would create accounts with known properties before compromising the database for these purposes.
[ Parent | on HN ]