News for hackers. Stuff that matters.

A comment on McGill will double your password if you don’t do it first. Parent comment

Re:McGill will double your password if you don’t do it first by azernik on Tuesday November 18, 2014 @10:54PM (#8628150)
Why is this a problem? If your password is "foofoo" and was set after the cutoff, then it won't be halved; if it is "foofoo" and was set before the cutoff, it will be halved, and then not match the password in the database, as intended.
[ Parent | on HN ]
Re:McGill will double your password if you don’t do it first by rafekett on Tuesday November 18, 2014 @11:30PM (#8628289)
this, i'm not sure why it is hard to see that this is easy to implement without storing passwords in plaintext.
[ Parent | on HN ]
Re:McGill will double your password if you don’t do it first by StavrosK on Wednesday November 19, 2014 @06:14AM (#8629373)
You have to have stored the last password change date, which many systems don't do.
[ Parent | on HN ]
Re:McGill will double your password if you don’t do it first by jtheory on Wednesday November 19, 2014 @06:42AM (#8629455)
If they didn't before, they can start storing it to implement this.
[ Parent | on HN ]