4 ms·
>Con: If database is compromised and passwords are reused across sites, then attackers might be able to access more sites Never heard of hashing or TLS/SRP?
by zer0tonin 10y ago
>Con: If database is compromised and passwords are reused across sites, then attackers might be able to access more sites
Never heard of hashing or TLS/SRP?
- manigandham 10y agoThose alone are not enough, a compromised database storing hashed passwords behind a service that uses TLS would still allow the attackers to try common passwords and hashing algorithms to see what passwords were used. Password simplicity and reuse (especially across lots of people) is a major problem with password security in data breaches.
- grenoire 10y agoSalting is more relevant in this case.
- grenoire 10y agoSalting is more relevant in this case.