3 ms·
No, sorry. They're borderline criminally negligent. When you have 1bn passwords stored in raw md5, a decade after the first rainbow tables were published, then
by chillydawg 10y ago
No, sorry. They're borderline criminally negligent. When you have 1bn passwords stored in raw md5, a decade after the first rainbow tables were published, then you don't deserve anyone's business or your freedom.
- kuschku 10y agoSure, it's borderline negligent. But it's already a godsend compared to what many banks do, storing passwords in plaintext, sending reset passwords via plaintext email, requiring 4-8 character passwords that can only contain digits and a limited set of characters, etc. I'd be more than happy if any bank would follow Yahoo!'s password standards.
- Kadin 10y agoMost banks don't have a billion customers. (There are probably a few that do, but not many.)