Re:Important Kickstarter Security Notice
by tptacek on Saturday February 15, 2014 @05:00PM
(#7245551)
No it doesn't. Attackers can obviously be presumed to have some number of password,digest pairs; for instance, for their own accounts. From that information it should be trivial to figure out the scheme used.
This of course leaves aside the fact that, having compromised any significant portion of the app, they are probably ε from source code anyways.
This of course leaves aside the fact that, having compromised any significant portion of the app, they are probably ε from source code anyways.