3 ms·
I learned very early on to never trust the client. An infected machine cold just not encrypt the password and now you have a database where infected clients jus
by dudus 11y ago
I learned very early on to never trust the client. An infected machine cold just not encrypt the password and now you have a database where infected clients just got sha256. That is if course easily broken with brute force or even rainbow tables.
- deleted 11y ago[deleted]
- joveian 11y agoAn infected machine would more likely steal the password, then still run the scrypt. Why make it easier for someone else to steal it too?