News for hackers. Stuff that matters.

A comment on CapitalOne has the most secure password system.

Re:CapitalOne has the most secure password system by coreyp_1 on Friday April 24, 2015 @02:49PM (#9435305)
Ouch! This means that they are storing your original password in plaintext somewhere, and that is definitely NOT best practices!
[ Parent | on HN ]
Re:CapitalOne has the most secure password system by loganfsmyth on Friday April 24, 2015 @02:55PM (#9435344)
Maybe it's only a hashed version of the characters? :P
[ Parent | on HN ]
Re:CapitalOne has the most secure password system by lappa on Friday April 24, 2015 @05:11PM (#9436048)
They may be storing the three characters as a hash separately, not that that is much better.
[ Parent | on HN ]
Re:CapitalOne has the most secure password system by bitsutah on Friday April 24, 2015 @06:08PM (#9436271)
So I just need a pre-hashed table of all 80 possible single chars for a lookup table?

That is worse than a hash of SSNs.

[ Parent | on HN ]
Re:CapitalOne has the most secure password system by lappa on Sunday May 03, 2015 @11:32PM (#9484151)
You check 3 characters, not 1, but like I said, 80^3 still isn't good.
[ Parent | on HN ]