3 ms·
>Being able to ask you for just certain characters in your password means the password is NOT stored securely. Thinking about this, they could create N differe
by nemothekid 11y ago
>Being able to ask you for just certain characters in your password means the password is NOT stored securely.
Thinking about this, they could create N different permutations of the password and encrypt those, and when you login it asks for 1 of N permutations of your password.
The downside being if there are N finite permutations and the attacker has one, the could just refresh the page until they go the permutation that is needed.
- hartator 11y agoI don't think it's technically possible because they do display some of the letters. They are just probably stored plain text or encrypted the password somewhere but I don't there is way to be a one way hash. I'll be on just plain incompetence.