3 ms·
And where do you suppose the salt is stored? (EDIT: Not to suggest Google would be so naive as to use a single static salt value with N hashing iterations. I re
by newobj 17y ago
And where do you suppose the salt is stored? (EDIT: Not to suggest Google would be so naive as to use a single static salt value with N hashing iterations. I really hope there's something smarter at play than that. The question is, does the source code contain all the information needed to perform dictionary attacks, or is some element of it externalized? And does anyone even know if user 'passwords' (in whatever hashed form they exist) were compromised?)
- brown9-2 17y agoI think sriramk's point is that having the source for this system isn't that much of a benefit if you don't have access to the data itself or the systems involved.
- eli 17y agoWell, if I were planning to hack into a system to steal its data, I would definitely prefer to have the source beforehand.