Re:Ask HN: How Do You Maintain Security When Working Remotely?
by falcolas on Sunday March 15, 2015 @10:37AM
(#9206630)
In our case, we run the widely available password cracking tools and rainbow tables against our stored passwords. If we can get them, those users are notified and their passwords reset.
Yes, we leave any salts and hashes in place - it limits the checks we can reasonably make to the usual password lists but it still catches a large number of poor passwords.
Yes, we leave any salts and hashes in place - it limits the checks we can reasonably make to the usual password lists but it still catches a large number of poor passwords.