2 ms·
Right. So there's an I suppose in there somewhere, and my response is still pretty much: "meh". The people who might could possibly get access to that passwor
by aggieben 11y ago
Right. So there's an I suppose in there somewhere, and my response is still pretty much: "meh". The people who might could possibly get access to that password already have access to all the data being protected by that password, and if they were so hell-bent on using your password to break into other sites, they could do that anyway by brute forcing what CBCrypt produces.
- Freaky 11y agoBrute forcing a password hash is a lot different from being able to trivially extract it from memory long after it's been used.